GO-2023-1527

vendorUSosv

Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor

view advisory published 2024-08-20Licence: per source

Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-0242UShigh8.8OT elevated—
Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any command on the server including writing arbi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan