CVE-2024-2412CWE-1220

Heimavista Rpage and Epage - Broken Access Control

Medium · published March 13, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.7th percentile
Weakness
CWE-1220 · Insufficient Granularity of Access Control
Published
2024-03-13T02:31Z
EPSS history
Timeline
  • 13 MAR 02:31Z
    Heimavista Rpage and Epage - Broken Access Control
    cvelistv5