CVE-2024-13061

creationtimestamp| type| source ---|---|--- 2024-12-31 11:18:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113747157856589140 2024-12-31 13:42:40+00:00| seen| https://t.me/cvedetector/14005...

CVE-2024-13061

The CVE-2024-13061 entry concerns the Electronic Official Document Management System from 2100 Technology with an authentication bypass. The root cause, as documented, is that unauthenticated remote attackers can obtain tokens for arbitrary users despite an IP whitelist protecting the API used to...

CVE-2024-13061 2100 Technology Electronic Official Document Management System - Authentication Bypass

The Electronic Official Document Management System from 2100 Technology has an Authentication Bypass vulnerability. Although the product enforces an IP whitelist for the API used to query user tokens, unauthenticated remote attackers can still deceive the server to obtain tokens of arbitrary user...