Unauthorized Access to Arbitrary CGI Files via Lack of Proper Access Control
CVE-2024-7729
7.5HIGH
What is CVE-2024-7729?
An identified vulnerability in CAYIN Technology CMS allows unauthorized remote attackers to bypass access controls and download arbitrary CGI files. This flaw highlights significant security concerns as it could lead to potential exposure of sensitive information and further exploitation of the system. Users are advised to apply the latest security patches to mitigate risks associated with this issue.
Affected Version(s)
CMS-20 11.0
CMS-60 11.0
CMS-SE 11.0
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved