Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Summary
Two critical vulnerabilities have been disclosed in Progress Software's MarkLogic Server database. These flaws could allow an account with limited management privileges to gain full administrator control over the server. Progress Software has released patches for these vulnerabilities, available in MarkLogic versions 11.3.7 and 12.1.0.
IFF Assessment
The disclosed vulnerabilities allow for privilege escalation, which is detrimental to defenders by enabling unauthorized access and control.
Severity
The identified vulnerabilities could allow for the elevation of privileges by an attacker with limited access to become a full administrator, representing a critical impact on confidentiality, integrity, and availability. The attack vector is likely network-based and exploits specific flaws in the delegated management functionality.
Defender Context
This highlights the critical need for organizations using MarkLogic Server to promptly apply patches. Defenders should prioritize updating to the latest versions to mitigate the risk of unauthorized administrative access. Monitoring for unusual administrative activity and access patterns on MarkLogic servers is also advised.