Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-k7g1-qb5k-s3ad
SummaryAn issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an attacker with granted emergency access to escalate their privileges by changing the access level and modifying the wait time. Consequently, the attacker can gain full control over the vault (when only intended to have read access) while bypassing the necessary wait period.
Aliases
0
alias CVE-2024-39924
Fixed_packages
0
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=aarch64&distroversion=v3.24&reponame=community
1
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armhf&distroversion=v3.24&reponame=community
2
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armv7&distroversion=v3.24&reponame=community
3
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=loongarch64&distroversion=v3.24&reponame=community
4
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=ppc64le&distroversion=v3.24&reponame=community
5
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=riscv64&distroversion=v3.24&reponame=community
6
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=s390x&distroversion=v3.24&reponame=community
7
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86&distroversion=v3.24&reponame=community
8
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=v3.24&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=v3.24&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86_64&distroversion=v3.24&reponame=community
9
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
10
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armhf&distroversion=v3.23&reponame=community
11
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armv7&distroversion=v3.23&reponame=community
12
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
13
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
14
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
15
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=s390x&distroversion=v3.23&reponame=community
16
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86&distroversion=v3.23&reponame=community
17
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
18
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=aarch64&distroversion=edge&reponame=community
19
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armhf&distroversion=edge&reponame=community
20
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armv7&distroversion=edge&reponame=community
21
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=loongarch64&distroversion=edge&reponame=community
22
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=ppc64le&distroversion=edge&reponame=community
23
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=riscv64&distroversion=edge&reponame=community
24
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=s390x&distroversion=edge&reponame=community
25
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86&distroversion=edge&reponame=community
26
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86_64&distroversion=edge&reponame=community
27
url pkg:apk/alpine/vaultwarden@1.32.0?arch=aarch64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=aarch64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=aarch64&distroversion=v3.20&reponame=community
28
url pkg:apk/alpine/vaultwarden@1.32.0?arch=armhf&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=armhf&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=armhf&distroversion=v3.20&reponame=community
29
url pkg:apk/alpine/vaultwarden@1.32.0?arch=armv7&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=armv7&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=armv7&distroversion=v3.20&reponame=community
30
url pkg:apk/alpine/vaultwarden@1.32.0?arch=ppc64le&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=ppc64le&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=ppc64le&distroversion=v3.20&reponame=community
31
url pkg:apk/alpine/vaultwarden@1.32.0?arch=riscv64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=riscv64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=riscv64&distroversion=v3.20&reponame=community
32
url pkg:apk/alpine/vaultwarden@1.32.0?arch=s390x&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=s390x&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=s390x&distroversion=v3.20&reponame=community
33
url pkg:apk/alpine/vaultwarden@1.32.0?arch=x86&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=x86&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=x86&distroversion=v3.20&reponame=community
34
url pkg:apk/alpine/vaultwarden@1.32.0?arch=x86_64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0?arch=x86_64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0%3Farch=x86_64&distroversion=v3.20&reponame=community
35
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=aarch64&distroversion=v3.22&reponame=community
36
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armhf&distroversion=v3.22&reponame=community
37
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=armv7&distroversion=v3.22&reponame=community
38
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community
39
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community
40
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community
41
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=s390x&distroversion=v3.22&reponame=community
42
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86&distroversion=v3.22&reponame=community
43
url pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/vaultwarden@1.32.0-r0?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vaultwarden@1.32.0-r0%3Farch=x86_64&distroversion=v3.22&reponame=community
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39924
reference_id
reference_type
scores
0
value 0.0025
scoring_system epss
scoring_elements 0.4852
published_at 2026-06-11T12:55:00Z
1
value 0.0025
scoring_system epss
scoring_elements 0.48657
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39924
1
reference_url https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0
reference_id 1.32.0
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T19:11:59Z/
url https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.0
2
reference_url https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/api/core/emergency_access.rs#L115-L148
reference_id emergency_access.rs#L115-L148
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T19:11:59Z/
url https://github.com/dani-garcia/vaultwarden/blob/1.30.3/src/api/core/emergency_access.rs#L115-L148
3
reference_url https://www.mgm-sp.com/cve/missing-authentication-check-for-emergency-access
reference_id missing-authentication-check-for-emergency-access
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-13T19:11:59Z/
url https://www.mgm-sp.com/cve/missing-authentication-check-for-emergency-access
Weaknesses
Exploits
Severity_range_score8.8 - 8.8
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-k7g1-qb5k-s3ad