Improper Authorization Vulnerability in MGT-COMMERCE CloudPanel
CVE-2024-44765
6.5MEDIUM
Key Information:
- Vendor
MGT-COMMERCE GmbH
- Vendor
- CVE Published:
- 8 November 2024
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2024-44765?
A vulnerability present in MGT-COMMERCE GmbH's CloudPanel from version 2.0.0 to 2.4.2 arises from improper authorization. This issue permits low-privilege users to bypass established access controls, granting them unauthorized entry to sensitive configuration files and critical administrative functionalities. Such a loophole can be exploited to compromise system integrity and confidentiality, highlighting the importance of rigorous access control configurations and regular audits to safeguard sensitive information.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.