CyberRota Analysis
AI-GeneratedAn administrative import function in Kiteworks Core is vulnerable due to inadequate verification of an administrator's entitlement to create privileged integration credentials. This flaw allows a delegated administrator with limited permissions to escalate their privileges to full system administrator status, potentially compromising the entire system. Organizations using Kiteworks Core should prioritize addressing this vulnerability to prevent unauthorized access and maintain system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system administrator privileges, without any action by an existing system administrator.
Related CVEs
Other vulnerabilities affecting the same vendor(s)