PatchTheCVE14finger vulnerabilities and fixes
Recent CVEs affecting 14finger, with upgrade or downgrade steps. 4 tracked.
14finger has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-07-10. Highest priority: CVE-2024-37770 (score 61/100).
- CVE-2024-37770 CRITICAL 9.1 DOWNGRADE 14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint func
- CVE-2024-37769 HIGH 8.8 DOWNGRADE Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator
- CVE-2024-37768 CRITICAL 9.1 DOWNGRADE 14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the component /api/admin/
- CVE-2024-37767 HIGH 7.5 DOWNGRADE Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user inf
FAQ
How do I fix 14finger vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 14finger being exploited right now?
None of the tracked 14finger CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 14finger CVE should I patch first?
CVE-2024-37770 currently ranks highest (61/100): 14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint func.