Back to search
CVE-2024-11401
Published: Dec 11, 2024
Modified: Dec 11, 2024
PUBLISHED
Description
Rapid7 Insight Platform versions prior to November 13th 2024, suffer from a privilege escalation vulnerability whereby, due to a lack of authorization checks, an attacker can successfully update the password policy in the platform settings as a standard user by crafting an API (the functionality was not possible through the platform's User Interface). This vulnerability has been fixed as of November 13th 2024.
| Vendor | Product | Versions |
|---|---|---|
Rapid7 | Insight Platform | affected Before Novemeber 13th |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now