Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-6908
Not yet scoredAwaiting CVSS assessment
Description
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.
yugabyte/yugabyte-db
GitHubYugabyteDB - the cloud native distributed SQL database for mission-critical applications.
GitHubYugabyteDB - the cloud native distributed SQL database for mission-critical applications.NVD