← Database

CVE-2024-6908

N/A CVSS: N/A Published: 2024-07-19 Modified: 2026-06-17

Description

Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.

Affected Platforms

Unknown

Weakness Type

CWE-269

References