PT-2025-2771 · Unknown · Report Application

Mehmet Ince · Published 2025-01-10 · Updated 2025-09-29 · CVE-2024-47520

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: Report application (affected versions not specified)

Description: A user with advanced report application access rights can perform actions for which they are not authorized. This issue allows unauthorized actions to be carried out by users with high-level access to the report application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-653

Related Identifiers

CVE-2024-47520

Affected Products

Report Application

References · 7

• https://osv.dev/vulnerability/CVE-2024-47520 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47520 · Security Note
• https://arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105 · Vendor Advisory
• https://t.me/cvedetector/15013 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1878050567437578458 · Twitter Post
• https://t.me/cveNotify/136793 · Telegram Post
• https://twitter.com/CVEnew/status/1877846135202607249 · Twitter Post