Kritik CVSS 9.9
CVE-2026-8709: Marklogic Server: hatalı yetki yönetimi
Açıklama (NVD)
An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database.
Özet bilgiler
- Ürün
- Progress Marklogic Server
- CVSS v3.1
- 9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,46 (yüzdelik 40)
- CWE
- CWE-269
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| progress-marklogic-server | — | — | 11.3.6 |
| progress-marklogic-server | 12.0.0 | — | 12.0.3 |