CVE-2024-34519

Avantra Server 24.x before 24.0.7 and 24.1.x before 24.1.1 mishandles the security of dashboards, aka XAN-5367. If a user can create a dashboard with an auto-login user, data disclosure may occur. Access control can be bypassed when there is a shared dashboard, and its auto-login user has...

CVE-2024-34519

CVE-2024-34519 affects Avantra Server 24.x (pre-24.0.7 and pre-24.1.1 for 24.1.x). The issue stems from mishandling of dashboard security, allowing data disclosure if a user can create a dashboard with an auto-login user. Access control can be bypassed when a shared dashboard uses an auto-login u...