CVE-2024-47087CWE-359

Information Disclosure Vulnerability

High · published September 19, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00436 · 36.9th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2024-09-19T06:08Z
EPSS history
Timeline
  • 19 SEP 06:08Z
    Information Disclosure Vulnerability
    cvelistv5