CVE-2024-5618
Broken Access Control in PruvaSoft Informatics' Apinizer Management Console
- State
- Published
- Severity
- 9.9 Critical
- Published
- Jul 18, 2024
- Updated
- Jun 3, 2026
- Reserved
- Jun 4, 2024
Description
Incorrect Permission Assignment for Critical Resource vulnerability in PruvaSoft Informatics Apinizer Management Console allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Apinizer Management Console: before 2024.05.1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.9 Critical | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-732 Incorrect Permission Assignment for Critical Resource
Affected Products
| Product | Versions |
|---|---|
Apinizer Management ConsolePruvaSoft Informatics |
|
References
- https://www.usom.gov.tr/bildirim/tr-24-1010government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1010government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.