Improper Authorization Vulnerability in MGT-COMMERCE CloudPanel
CVE-2024-44765

Currently unrated

Key Information:

Vendor
MGT-COMMERCE GmbH
Vendor
CVE Published:
8 November 2024

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A vulnerability present in MGT-COMMERCE GmbH's CloudPanel from version 2.0.0 to 2.4.2 arises from improper authorization. This issue permits low-privilege users to bypass established access controls, granting them unauthorized entry to sensitive configuration files and critical administrative functionalities. Such a loophole can be exploited to compromise system integrity and confidentiality, highlighting the importance of rigorous access control configurations and regular audits to safeguard sensitive information.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-44765
Created by josephgodwinkimani

References

http://mgt-commerce.com
https://github.com/EagleTube/CloudPanel/tree/main/CVE-202...

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.