Administrative Privileges Vulnerability in OpenCTI Platform
CVE-2024-26139
What is CVE-2024-26139?
OpenCTI, a widely used open-source platform for managing cyber threat intelligence, has a significant vulnerability related to its profile edit functionality. This flaw allows an authenticated attacker with minimal privileges to exploit the system and elevate their privileges to administrative levels. The vulnerability arises from insufficient security controls, compromising the integrity and security of the application. Organizations relying on OpenCTI should prioritize patching to mitigate potential risks associated with unauthorized access and data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
opencti <= 5.12.31
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
