Cyber Posture

CVE-2024-46480

High

Published: 13 January 2025

Published
13 January 2025
Modified
03 October 2025
KEV Added
—
Patch
—
CVSS Score 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0018 39.2th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may “pass the hash” using stolen password hashes to move laterally within an environment, bypassing normal system access controls.

Security Summary

CVE-2024-46480 is an NTLM hash leak vulnerability in Venki Supravizio BPM versions up to 18.0.1. Published on January 13, 2025, it carries a CVSS v3.1 base score of 8.4 (AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) and maps to CWE-522 (Insufficiently Protected Credentials). The flaw enables exposure of NTLM hashes within this business process management software.

An authenticated attacker with Application Administrator access can exploit the vulnerability over an adjacent network with low complexity. Successful exploitation allows privilege escalation on the underlying host system, providing high confidentiality, integrity, and availability impacts due to the changed scope.

Advisories and further details are available in the researcher's disclosure at https://github.com/Lorenzo-de-Sa/Vulnerability-Research/blob/main/CVE-2024-46480.md and on the vendor's Supravizio page at https://www.venki.com.br/ferramenta-bpm/supravizio/.

Details

CWE(s)
CWE-522

Affected Products

venki
supravizio bpm
≤ 18.0.1

MITRE ATT&CK Enterprise Techniques

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
T1212 Exploitation for Credential Access Credential Access
Adversaries may exploit software vulnerabilities in an attempt to collect credentials.
attack.mitre.org →
T1550.002 Pass the Hash Lateral Movement
Adversaries may “pass the hash” using stolen password hashes to move laterally within an environment, bypassing normal system access controls.
attack.mitre.org →
Why these techniques?

The vulnerability is an authenticated NTLM hash leak in Supravizio BPM exploited for credential access (T1212), enabling Pass the Hash (T1550.002) and overall privilege escalation to RCE on the host (T1068).

References