CVE-2024-44076

CRITICAL

microcks < 1.10.0 - Improper Privilege Management in Import/Export Endpoints

Title source: llm

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access.

Core 3

Core References

Patch

Issue Tracking, Vendor Advisory

Release Notes

CVSS v3 9.8

EPSS 0.0060

EPSS Percentile 44.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

CWE

CWE-269

Status published

Products (2)

io.github.microcks/microcks-app 0 - 1.10.0Maven

microcks/microcks < 1.10.0

Published Aug 19, 2024

Tracked Since Feb 18, 2026