CVE-2024-39875CWE-732

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)

Medium · published July 9, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege users with the 'Manage own remote connections' permission to retrieve details about other users and group memberships.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00259 · 16.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-07-09T12:05Z
EPSS history
Timeline
  • 09 JUL 12:05Z
    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
    cvelistv5