CVE-2024-47089
Unauthorized Transaction Manipulation Vulnerability
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 19, 2024
- Updated
- Sep 19, 2024
- Reserved
- Sep 18, 2024
Description
This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N | CERT-In |
Weaknesses
- CWE-354 Improper Validation of Integrity Check Value
Affected Products
| Product | Versions |
|---|---|
LD GeoApex Softcell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.