CVE-2024-47087
Information Disclosure Vulnerability
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 19, 2024
- Updated
- Sep 19, 2024
- Reserved
- Sep 18, 2024
Description
This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N | CERT-In |
Weaknesses
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
LD GeoApex Softcell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.