Lucene search
HistoryJun 27, 2024 - 1:15 p.m.
CVE-2024-1107
cve-2024-1107
authorization bypass
talya informatics
travel apps
incorrectly configured access control security levels
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.4%
Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68.
References
Related
cvelist
cvelist
CVE-2024-1107 IDOR in Talya Informatics' Travel APPS
2024-06-27 13:01:50
cve
cve
CVE-2024-1107
2024-06-27 13:15:54
vulnrichment
vulnrichment
CVE-2024-1107 IDOR in Talya Informatics' Travel APPS
2024-06-27 13:01:50
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.4%
Related for NVD:CVE-2024-1107