Vulnerability Description
Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and/or alter the information of the unauthorized table.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Exceedone | Exment | < 5.0.11 |
Related Weaknesses (CWE)
References
- https://exment.net/docs/#/weakness/20241010_2Vendor Advisory
- https://exment.net/vulnerability-correspondence-version-6-1-5-and-5-0-12-releaseVendor Advisory
- https://jvn.jp/en/jp/JVN74538317/Third Party Advisory
FAQ
What is CVE-2024-46897?
CVE-2024-46897 is a vulnerability with a CVSS score of 3.8 (LOW). Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and/...
How severe is CVE-2024-46897?
CVE-2024-46897 has been rated LOW with a CVSS base score of 3.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-46897?
Check the references section above for vendor advisories and patch information. Affected products include: Exceedone Exment.