Vulnerabilities > CVE-2024-7265 - Incorrect Authorization vulnerability in Nask EZD RP 15/16/17
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Incorrect User Management vulnerability in Naukowa i Akademicka Siec Komputerowa - Panstwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |