CVE-2024-23764

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint Protection 17 and later.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.withsecure.com/en/support/security-advisories	Product
https://www.withsecure.com/en/support/security-advisories/cve-2024-23764	Vendor Advisory
https://www.withsecure.com/en/support/security-advisories	Product
https://www.withsecure.com/en/support/security-advisories/cve-2024-23764	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:withsecure:client_security:15:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:withsecure:server_security:15:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:withsecure:email_and_server_security:15:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:withsecure:elements_endpoint_protection:17:*:*:*:*:*:*:*

History

21 Nov 2024, 08:58

Type	Values Removed	Values Added
References	~~() https://www.withsecure.com/en/support/security-advisories - Product~~	() https://www.withsecure.com/en/support/security-advisories - Product
References	~~() https://www.withsecure.com/en/support/security-advisories/cve-2024-23764 - Vendor Advisory~~	() https://www.withsecure.com/en/support/security-advisories/cve-2024-23764 - Vendor Advisory

15 Feb 2024, 17:57

Type	Values Removed	Values Added
CWE		CWE-269
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.7
Summary		(es) Ciertos productos WithSecure permiten la escalada de privilegios locales. Esto afecta a WithSecure Client Security 15 y posteriores, WithSecure Server Security 15 y posteriores, WithSecure Email and Server Security 15 y posteriores, y WithSecure Elements Endpoint Protection 17 y posteriores.
References	~~() https://www.withsecure.com/en/support/security-advisories -~~	() https://www.withsecure.com/en/support/security-advisories - Product
References	~~() https://www.withsecure.com/en/support/security-advisories/cve-2024-23764 -~~	() https://www.withsecure.com/en/support/security-advisories/cve-2024-23764 - Vendor Advisory
First Time		Withsecure Withsecure server Security Withsecure elements Endpoint Protection Withsecure email And Server Security Withsecure client Security
CPE		cpe:2.3:a:withsecure:client_security:15:::::::* cpe:2.3:a:withsecure:elements_endpoint_protection:17:::::::* cpe:2.3:a:withsecure:server_security:15:::::::* cpe:2.3:a:withsecure:email_and_server_security:15:::::::*

08 Feb 2024, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-08 19:15

Updated : 2025-05-15 20:15

NVD link : CVE-2024-23764

Mitre link : CVE-2024-23764

CVE.ORG link : CVE-2024-23764

JSON object : View

Products Affected

withsecure

server_security
client_security
elements_endpoint_protection
email_and_server_security

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2024-23764", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2024-02-08T19:15:08.180", "references": [{"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.withsecure.com/en/support/security-advisories/cve-2024-23764", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.withsecure.com/en/support/security-advisories/cve-2024-23764", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint Protection 17 and later."}, {"lang": "es", "value": "Ciertos productos WithSecure permiten la escalada de privilegios locales. Esto afecta a WithSecure Client Security 15 y posteriores, WithSecure Server Security 15 y posteriores, WithSecure Email and Server Security 15 y posteriores, y WithSecure Elements Endpoint Protection 17 y posteriores."}], "lastModified": "2025-05-15T20:15:44.687", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:client_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1755AB17-E9C9-4616-98B4-843B75668CA4"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:server_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "015D02AD-F46F-46DF-9CD8-E0DB78CE17DD"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:email_and_server_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E1B31DD-3C88-4826-8E24-588FED197C5D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:elements_endpoint_protection:17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A96B0F0-1713-4621-A463-8FB513490F3B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

6.7 /10