Rapid7 Vulnerabilities and Affected Products
Vulnerabilities associated with Insight Platform.
Products
Clear product- Velociraptor32 vulnerabilities
- Nexpose17 vulnerabilities
- Insight Agent10 vulnerabilities
- InsightVM9 vulnerabilities
- AppSpider Pro6 vulnerabilities
- Metasploit Framework6 vulnerabilities
- Metasploit Pro6 vulnerabilities
- Metasploit4 vulnerabilities
- InsightCloudSec3 vulnerabilities
- InsightConnect Sed Plugin3 vulnerabilities
- AppSpider2 vulnerabilities
- Insight Platform2 vulnerabilities
- Insight Collector1 vulnerability
- InsightAppSec1 vulnerability
- InsightConnect AWK Plugin1 vulnerability
- InsightConnect Compression Plugin1 vulnerability
- InsightConnect Finger Plugin1 vulnerability
- InsightConnect Markdown Plugin1 vulnerability
- InsightConnect Ping Plugin1 vulnerability
- InsightConnect RPM Plugin1 vulnerability
- InsightConnect SQLmap Plugin1 vulnerability
- InsightConnect Tcpdump Plugin1 vulnerability
- InsightConnect TR Plugin1 vulnerability
- InsightConnect Traceroute Plugin1 vulnerability
- InsightVM Virtual Appliance1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-11401MEDIUM | Rapid7 Insight Platform Privilege Escalation VulnerabilityRapid7 Insight Platform versions prior to November 13th 2024, suffer from a privilege escalation vulnerability whereby, due to a lack of authorization checks, an attacker can successfully update the password policy in the platform settings as a standard user by crafting an API (the functionality was not possible through the platform's User Interface). This vulnerability has been fixed as of November 13th 2024. CWE-862Dec 11, 2024 | CVSS5.3v4.0 | EPSS0.323% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Rapid7 Insight Platform Unauthorized Empty Group CreationRapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty user group being added to the incorrect customer. This vulnerability is remediated as of August 14, 2024. CWE-862Sep 9, 2024 | CVSS2.4v3.1 | EPSS0.177% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |