Two critical MarkLogic flaws let delegated managers gain admin control

Progress Software disclosed 31 vulnerabilities in its MarkLogic Server database, five of them rated critical. Two flaws allow an account with limited management privileges to take full administrator control of the server. Fixes have been available since September 10 in MarkLogic 11.3.7 and 12.1.0.

• 31 flaws disclosed in total, five rated critical
• Two bugs let a delegated manager gain administrator rights
• Fixes available since September 10 in MarkLogic 11.3.7 and 12.1.0