Incorrect Permission Assignment in PruvaSoft Apinizer Management Console
CVE-2024-5618

9.9CRITICAL

Key Information:

Vendor

Pruvasoft Informatics

Status
Apinizer Management Console
Vendor
CVE Published:
18 July 2024

What is CVE-2024-5618?

A vulnerability identified in PruvaSoft Informatics' Apinizer Management Console reveals an incorrect permission assignment for critical resources. This flaw enables unauthorized users to access functionalities that are not properly constrained by Access Control Lists (ACLs). The affected version is any release prior to 2024.05.1. Users of this console should take immediate steps to update to a secure version to mitigate potential exploits.

Affected Version(s)

Apinizer Management Console 0 < 2024.05.1

References

https://www.usom.gov.tr/bildirim/tr-24-1010

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Furkan Çağlar ÇELİK
.
CVE-2024-5618 : Incorrect Permission Assignment in PruvaSoft Apinizer Management Console