CVE-2024-12367CWE-497

Information Disclosure in Vegagrup Software's Vega Master

High · published September 16, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Master allows Directory Indexing.

This issue affects Vega Master: from v.1.12.35 through 20250916.

NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.7th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-09-16T07:46Z
EPSS history
Timeline
  • 16 SEP 07:46Z
    Information Disclosure in Vegagrup Software's Vega Master
    cvelistv5