CVE-2024-47085CWE-359

Parameter Manipulation Vulnerability

High · published September 19, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00436 · 36.9th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2024-09-19T05:56Z
EPSS history
Timeline
  • 19 SEP 05:56Z
    Parameter Manipulation Vulnerability
    cvelistv5