| id: GO-2023-1527 |
| modules: |
| - module: www.velocidex.com/golang/velociraptor |
| versions: |
| - fixed: 0.6.7-5 |
| vulnerable_at: 0.6.7-4 |
| summary: Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor |
| cves: |
| - CVE-2023-0242 |
| ghsas: |
| - GHSA-g5vm-525q-r66c |
| references: |
| - advisory: https://github.com/advisories/GHSA-g5vm-525q-r66c |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-0242 |
| - web: https://docs.velociraptor.app/announcements/2023-cves/#:~:text=to%20upgrade%20clients.-,CVE%2D2023%2D0242,-Insufficient%20Permission%20Check |
| source: |
| id: GHSA-g5vm-525q-r66c |
| created: 2024-08-20T11:30:44.889318-04:00 |
| review_status: UNREVIEWED |
| unexcluded: EFFECTIVELY_PRIVATE |
