CVE-2024-47085
Parameter Manipulation Vulnerability
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 19, 2024
- Updated
- Sep 20, 2024
- Reserved
- Sep 18, 2024
Description
This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters (cCdslClicentcode and cLdClientCode) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N | CERT-In |
Weaknesses
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
LD DP Back OfficeApex Softcell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.