Paper/Archive/CVE-2024-5618

CVE-2024-5618

PruvaSoft Informatics Apinizer Management Console — Broken Access Control in PruvaSoft Informatics' Apinizer Management Console

EPSS 0.4%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 37.7.377 × 207.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Incorrect Permission Assignment for Critical Resource vulnerability in PruvaSoft Informatics Apinizer Management Console allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Apinizer Management Console: before 2024.05.1.

Affected

ProductAffectedFixed inSource

Apinizer Management Console< 2024.05.12024.05.1CNA

apinizer< 2024.05.12024.05.1CISA-ADP

Scores by source

TR-CERT (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-1010 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1010