Missing Authorization Vulnerability Affects Rapid7 Insight Platform

CVE-2024-8042

What is CVE-2024-8042?

The Rapid7 Insight Platform is vulnerable to a significant security flaw that enables an attacker to intercept local requests. This issue allows unauthorized users to alter the name and description of user groups, which could result in empty or improperly configured user groups being associated with incorrect customer accounts. This vulnerability was effectively addressed in the update released on August 14, 2024, mitigating the potential for misuse.

References