Insecure Inherited Permissions in Computing Improvement Program - CVE-2024-36276
Published: November 14, 2024
Vulnerability identifier: #VU100490
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-36276
CWE-ID: CWE-277
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insecure inherited permissions, which leads to security restrictions bypass and privilege escalation.
Affected software
Computing Improvement Program
How to mitigate CVE-2024-36276
Install updates from vendor's website.
Computing Improvement Program - update to 2.4.10852