CVE-2024-4215
Last modified
CVE-2024-4215 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account’s MFA enrollment status.. EPSS estimates a 0.63% chance of exploitation in the next 30 days.
Description
pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account’s MFA enrollment status.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Pgadmin | Pgadmin 4 | < 8.6 |
| Fedoraproject | Fedora | 40 |
References
- https://github.com/pgadmin-org/pgadmin4/issues/7425Issue Tracking
- https://github.com/pgadmin-org/pgadmin4/issues/7425Issue Tracking
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-4215?
How severe is CVE-2024-4215?
How do I fix CVE-2024-4215?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-42144In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42145In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42146In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42147In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-42148In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-42149In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42150In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42151In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42152In the Linux kernel, the following vulnerability has been re…4.7
- CVE-2024-42153In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-42154In the Linux kernel, the following vulnerability has been re…4.4
- CVE-2024-42155In the Linux kernel, the following vulnerability has been re…1.9
Are you affected by CVE-2024-4215?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST