CVE-2024-39328

MEDIUM

Atos Eviden IDRA & IDCA <2.7.0 - Privilege Escalation

Title source: llm

Description

Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role (Config Admin) could exceed their configuration privileges in a multi-partition environment and access some confidential data. Data integrity and availability is not at risk.

References (2)

Core 2

Core References

Various Sources

https://eviden.com/solutions/digital-security/digital-identity/

Various Sources

https://support.bull.com/ols/product/security/psirt/security-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-cve-2024-51505/view

Scores

CVSS v3 6.8

EPSS 0.0035

EPSS Percentile 26.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-863

Status published

Published Feb 18, 2025

Tracked Since Feb 18, 2026