Missing Authorization Vulnerability Affects Hercules Core

CVE-2024-37232

Summary

The Hercules Core product from Hercules Design has a vulnerability arising from missing authorization checks that impact the access control mechanisms. This issue may allow malicious users to exploit incorrectly configured security levels, enabling unauthorized changes and access to restricted functionalities. Versions of Hercules Core from n/a to 6.5 are specifically impacted, highlighting the importance of proper configuration and ongoing monitoring to safeguard against potential exploitation.

References