CVE-2024-0642CWE-284

Inadequate access control in C21 Live Encoder and Live Mosaic

Critical · published January 17, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
49.6
In the wild
Unconfirmed
What it is

🔥 A remote attacker can waltz right into your application as an admin with this CVE-2024-0642 vulnerability! Think of it like a front desk at a hotel that forgets to check IDs—anyone can just walk in and claim they're the VIP guest. It’s a serious oversight that opens the doors to havoc! An attacker could exploit this vulnerability to gain full administrator access, allowing them to manipulate settings, steal sensitive data, and wreak havoc on your system. This could lead to unauthorized changes, data breaches, or even complete system compromise!

Put simply

Think of it like a front desk at a hotel that forgets to check IDs—anyone can just walk in and claim they're the VIP guest. It’s a serious oversight that opens the doors to havoc! The vulnerability stems from inadequate access control in C21 Live Encoder and Live Mosaic version 5.3, allowing attackers to bypass proper credential management and interact with the application as if they were legitimate admin users.

What to do

An attacker could exploit this vulnerability to gain full administrator access, allowing them to manipulate settings, steal sensitive data, and wreak havoc on your system. This could lead to unauthorized changes, data breaches, or even complete system compromise! Patch to version 5.3.1 immediately to close this critical gap. Review your access controls and implement strict authentication measures to ensure that only authorized users can access sensitive parts of your application. You've got this! Stay vigilant and act fast to protect your systems! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-01-17T13:43Z
EPSS history
Timeline
  • 17 JAN 13:43Z
    Inadequate access control in C21 Live Encoder and Live Mosaic
    cvelistv5