What’s Vulnerable › Vulnerabilities

CVE-2024-39327

• Severity: critical (CVSS 9.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-18 · updated 2026-06-17
• Weakness: CWE-284

Description

Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way.

References

• https://eviden.com/solutions/digital-security/digital-identity/
• https://support.bull.com/ols/product/security/psirt/security-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-cve-2024-51505/view

Get alerted when CVE-2024-39327 or the next vulnerability affects your stack