CVE-2024-30059 - Vulnerability Details - OpenCVE

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00164.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Intune Mobile Application Management

Configuration 1 [-]

cpe:2.3:a:microsoft:intune_mobile_application_management:*:*:*:*:*:android:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-27996	Microsoft Intune for Android Mobile Application Management Tampering Vulnerability

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059

History

Wed, 08 Jan 2025 18:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft Microsoft intune Mobile Application Management
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:microsoft:intune_mobile_application_management::::::android::*
Vendors & Products		Microsoft Microsoft intune Mobile Application Management

Tue, 31 Dec 2024 19:15:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:microsoft:intune_mobile_application_management_for_android::::::::
Vendors & Products	Microsoft Microsoft intune Mobile Application Management For Android

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2024-05-14T16:57:17.069Z

Updated: 2025-05-03T00:06:34.845Z

Reserved: 2024-03-22T23:12:14.565Z

Link: CVE-2024-30059

Vulnrichment

Updated: 2024-08-02T01:25:02.927Z

NVD

Status : Analyzed

Published: 2024-05-14T17:17:23.210

Modified: 2025-01-08T17:33:36.930

Link: CVE-2024-30059

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-30059", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-03-22T23:12:14.565Z", "datePublished": "2024-05-14T16:57:17.069Z", "dateUpdated": "2025-05-03T00:06:34.845Z"}, "containers": {"cna": {"title": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "datePublic": "2024-05-14T07:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:intune_mobile_application_management_for_android:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.0", "versionEndExcluding": "5.0.6215.0"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Intune Mobile Application Management", "platforms": ["Unknown"], "versions": [{"version": "1.0", "lessThan": "5.0.6215.0", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-284: Improper Access Control", "lang": "en-US", "type": "CWE", "cweId": "CWE-284"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-05-03T00:06:34.845Z"}, "references": [{"name": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.1, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:H/RL:O/RC:C"}}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-30059", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-14T19:01:16.794902Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:39:16.235Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:25:02.927Z"}, "title": "CVE Program Container", "references": [{"name": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059", "name": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:25:02.927Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-30059", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-14T19:01:16.794902Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-14T19:01:25.187Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:H/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Intune Mobile Application Management", "versions": [{"status": "affected", "version": "1.0", "lessThan": "5.0.6215.0", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2024-05-14T07:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30059", "name": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Microsoft Intune for Android Mobile Application Management Tampering Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:intune_mobile_application_management_for_android:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.0.6215.0", "versionStartIncluding": "1.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-05-03T00:06:34.845Z"}}}, "cveMetadata": {"cveId": "CVE-2024-30059", "state": "PUBLISHED", "dateUpdated": "2025-05-03T00:06:34.845Z", "dateReserved": "2024-03-22T23:12:14.565Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-05-14T16:57:17.069Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}