CVE-2024-0580

creationtimestamp| type| source ---|---|--- 2024-01-18 10:21:58+00:00| seen| https://t.me/ctinow/169650 2024-02-12 10:41:44+00:00| seen| https://t.me/ctinow/183015...

CVE-2024-0580 Omission of key-controlled authorization in Qsige

Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3,...

CVE-2024-0580

CVE-2024-0580 affects QSige, part of the IDMSistemas platform. The root cause is omission of user-controlled key authorization in the API, enabling access to sensitive information via the endpoint /qsige.locator/quotePrevious/centers/X, where X can be 1, 2, 3, etc. Documents identify the affected...