Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Progress Software's MarkLogic Server database has 31 newly disclosed vulnerabilities, including two that could allow an account with limited management privileges to gain administrator control. The company has rated five of these vulnerabilities as critical. Fixes for the issues have been available since September 10 in MarkLogic versions 11.3.7 and 12.1.0, with the full list of vulnerabilities published on October 12. These two specific flaws could give delegated managers persistent admin control. The vulnerabilities affect MarkLogic Server, but the exact scope of the impact is not specified.