Administrative Privileges Vulnerability in OpenCTI Platform

CVE-2024-26139

What is CVE-2024-26139?

OpenCTI, a widely used open-source platform for managing cyber threat intelligence, has a significant vulnerability related to its profile edit functionality. This flaw allows an authenticated attacker with minimal privileges to exploit the system and elevate their privileges to administrative levels. The vulnerability arises from insufficient security controls, compromising the integrity and security of the application. Organizations relying on OpenCTI should prioritize patching to mitigate potential risks associated with unauthorized access and data exposure.

References