CVE-2024-33872
Critical
Description
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.
SeverityCritical
CVSS9.8
Exploit probability42. percentile0.5%
ProductKeyfactor Command
PublishedAug 20, 2024
First seenAug 20, 2024
How to fix
Update
- keyfactor command10.5.1, 11.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| keyfactor command | 10.5.0 ≤ v < 10.5.1, 11.5.0 ≤ v < 11.5.1 | 10.5.1, 11.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.