CVE-2024-6908
- Source
- https://cve.org/CVERecord?id=CVE-2024-6908
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6908.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-6908
- Published
- 2024-07-19T14:57:00.607Z
- Modified
- 2026-07-08T08:04:35.318291771Z
- Severity
-
- 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:L/VI:H/VA:N/SC:H/SI:H/SA:H CVSS Calculator
- Summary
- Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request
- Details
-
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6908.json", "cna_assigner": "Yugabyte", "cwe_ids": [ "CWE-269" ] }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6908.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-6908
- https://github.com/yugabyte/yugabyte-db/commit/03b193de40b79329439bb9968a7d27a1cc57d662
- https://github.com/yugabyte/yugabyte-db/commit/68f01680c565be2a370cfb7734a1b3721d6778bb
Affected packages
Git / github.com/yugabyte/yugabyte-db
Affected ranges
- Type
- GIT
- Repo
- https://github.com/yugabyte/yugabyte-db
- Events
-
IntroducedIntroducedIntroducedIntroducedFixedFixedFixedFixed
- Database specific
{ "source": [ "AFFECTED_FIELD", "REFERENCES" ], "extracted_events": [ { "introduced": "2.14.0.0" }, { "last_affected": "2.14.17.0" }, { "introduced": "2.16.0.0" }, { "last_affected": "2.16.9.0" }, { "introduced": "2.18.0.0" }, { "fixed": "2.18.7.0" }, { "introduced": "2.20.0.0" }, { "fixed": "2.20.3.0" } ] }