CVE-2024-45786CWE-639

Improper Authorization Vulnerability

High · published September 11, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to gain unauthorized access to sensitive information belonging to other users.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00391 · 32.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-09-11T11:48Z
EPSS history
Timeline
  • 11 SEP 11:48Z
    Improper Authorization Vulnerability
    cvelistv5