CVE-2024-23764 Privilege escalation in n/a
Local attackers can escalate privileges in WithSecure endpoint security products, requiring vendors to apply security patches.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-23764?
CVE-2024-23764 is a medium-severity vulnerability in n/a, published on 8 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint Protection 17 and later.
Weakness: CWE-269
Which versions are affected by CVE-2024-23764?
It affects 4 products.
Products include Withsecure Client Security, Withsecure Elements Endpoint Protection, Withsecure Email and Server Security, Withsecure Server Security.
How do I fix CVE-2024-23764?
No fix has been published for CVE-2024-23764 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-23764 being exploited?
There is no known exploitation of CVE-2024-23764 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-32c5-v2g2-22x7.