CVE-2024-9970

High

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate…

twcert·CWE-565·Published 2024-10-15

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

209 chars

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.

NVDen

209 chars

NVDes

220 chars

El sistema FlowMaster BPM Plus de NewType tiene una vulnerabilidad de escalada de privilegios. Los atacantes remotos con privilegios normales pueden elevar sus privilegios a administrador alterando una cookie específica.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H