vendor:
Adapt Authoring Tool
by:
Eui Chul Chung
6.1
CVSS
HIGH
Remote Command Execution (RCE)
78
CWE
Product Name: Adapt Authoring Tool
Affected Version From: 2000.11.3
Affected Version To: 2000.11.3
Patch Exists: NO
Related CWE: CVE-2024-50672, CVE-2024-50671
CPE: a:adaptlearning:adapt_authoring:0.11.3
Platforms Tested:
2024
Adapt Authoring Tool 0.11.3 – Remote Command Execution (RCE)
The Adapt Authoring Tool version 0.11.3 is vulnerable to remote command execution. An attacker can exploit this vulnerability to execute commands remotely. This issue has been assigned CVE identifiers CVE-2024-50672 and CVE-2024-50671.
Mitigation:
To mitigate this vulnerability, it is recommended to update the software to a patched version as soon as possible. Additionally, restrict network access to the application and implement strong authentication mechanisms.