CVE-2024-45789
Parameter Tampering Vulnerability
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 11, 2024
- Updated
- Sep 11, 2024
- Reserved
- Sep 9, 2024
Description
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body on the vulnerable application.
Successful exploitation of this vulnerability could allow the attacker to bypass certain constraints in the registration process leading to creation of multiple accounts.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | CERT-In |
Weaknesses
- CWE-354 Improper Validation of Integrity Check Value
Affected Products
| Product | Versions |
|---|---|
Mutual Fund Distribution Product (aiM-Star)Reedos Software Solutions |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.