Threats tagged 'ghsa-5q24-jq83-qh8q'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-119648Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows Medium5.32026-10-30GCVE DatabaseCVE-2026-119648 Tencent BlueKing CMDB (bk-cmdb) versions through 3.14.6 have a missing authorization vulnerability that allows authenticated users to view hosts belonging to other businesses. This occurs because the API endpoint POST /api/v3/hosts/search/asstdetail bypasses authorization checks, enabling unauthorized access to host attributes and topology details. Report on CVE-2026-119648 Vulnerability CWE-862 #ghsa-5q24-jq83-qh8q	GCVE Database	2026-10-30

Page 1 of 1