Access Control Flaw in Banner System Affects User Security

CVE-2024-54359

What is CVE-2024-54359?

A critical missing authorization vulnerability has been identified in the Banner System developed by Saul Morales Pacheco. This vulnerability arises due to incorrectly configured access control security levels, allowing unauthorized users to exploit the system and potentially execute unauthorized actions. This issue affects all versions of the Banner System up to 1.0.0, highlighting the urgent need for users to evaluate their security controls and apply necessary updates to mitigate potential security risks.

References