CVE-2024-55402
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An access control issue was discovered in 4C Strategies Exonaut prior to version 22.4, which may allow unauthorized users to access resources without proper permissions.
Risk Assessment
The risk involves potential unauthorized access to sensitive data or system functions, potentially leading to breaches of confidentiality and integrity.
Recommendation
It is recommended to immediately upgrade 4C Strategies Exonaut to version 22.4 or later, which includes a fix for this issue.
Other vulnerabilities in 4C Strategies Exonaut
See all- CVE-2024-55401Medium
An issue in 4C Strategies Exonaut before version 22.4 allows attackers to perform a directory traversal attack. This vulnerability enables reading files outside the intended directory.
- CVE-2024-55399Medium
A Server-Side Request Forgery (SSRF) vulnerability was discovered in 4C Strategies Exonaut prior to version 21.6.2.1-1. This allows an attacker to send requests from the server to internal network resources.
- CVE-2024-55398Medium
Insecure permissions were discovered in 4C Strategies Exonaut prior to version 22.4, potentially allowing unauthorized access to resources.
Original NVD description (English source)
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS