CVE-2024-2005: Privilege Escalation in Blue Planet Inventory

An attacker exploiting CVE-2024-2005 could gain elevated privileges within the Blue Planet Inventory system. This could allow them to perform actions they are not authorized to do, such as modifying network configurations, accessing sensitive data, or potentially gaining control of the entire system. The impact is particularly severe because BPI is often used to manage critical network infrastructure, and unauthorized changes could disrupt services or compromise security. The ability to escalate privileges through a misconfiguration highlights the importance of secure SAML implementation and regular security audits.

1. Reserved2024-02-29
2. Published2024-03-05
3. Modified2024-08-29
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-2005 is to upgrade Blue Planet Inventory to version 22.12.1 or later. Prior to upgrading, it is highly recommended to review and validate all SAML configurations to ensure they adhere to security best practices. Specifically, verify that SAML assertions are properly validated and that access controls are enforced. If an immediate upgrade is not possible, consider temporarily disabling SAML authentication and reverting to a different authentication method, although this will impact user access. After upgrading, confirm the fix by attempting to reproduce the privilege escalation scenario with a non-administrative user account and verifying that the attempt fails.