CVE-2024-34517

Summary

The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.

Affected Software

Weaknesses

• CWE-471: CWE-471 Modification of Assumed-Immutable Data (MAID)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://trust.neo4j.com
• https://neo4j.com/security/cve-2024-34517/
• https://github.com/neo4j/neo4j/wiki/Neo4j-5-changelog#cypher
• https://github.com/advisories/GHSA-p343-9qwp-pqxv

References

• https://trust.neo4j.com
• https://neo4j.com/security/cve-2024-34517/
• https://github.com/neo4j/neo4j/wiki/Neo4j-5-changelog#cypher
• https://github.com/advisories/GHSA-p343-9qwp-pqxv

• ←Previous
• Next→