CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40404

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 are susceptible to an access control issue within the API endpoint used to establish Web Sockets connections. This vulnerability allows for unauthorized access due to improper control mechanisms at the connection endpoint. To mitig...

PT-2024-28831

Name of the Vulnerable Software and Affected Versions Cybele Software Thinfinity Workspace versions prior to 7.0.3.109 Description The issue is related to incorrect access control, allowing attackers to gain access to a secondary broker via a crafted request. This can potentially lead to...

CVE-2024-40404: Missing Authentication for Critical Function

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...