CVE-2024-10438CWE-288

Sunnet eHRD CTMS - Authentication Bypass

High · published October 28, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain functionalities.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00526 · 43.7th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2024-10-28T02:46Z
EPSS history
Timeline
  • 28 OCT 02:46Z
    Sunnet eHRD CTMS - Authentication Bypass
    cvelistv5