Auth Bypass Vulnerability in eHRD CTMS Allows Unauthorized Access

CVE-2024-10438

What is CVE-2024-10438?

The eHRD CTMS from Sunnet is subject to an authentication bypass vulnerability that allows attackers to gain unauthorized access to certain functionalities without proper authentication. By meeting specific conditions, unauthenticated remote attackers can exploit this vulnerability, posing significant security risks to the integrity of the system. Organizations using this product should prioritize patching and take necessary precautions to safeguard their systems against potential exploitation.

References