CVE-2024-29838

Technical details about CVE-2024-29838 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2024-29839

The CVE-2024-29839 entry concerns Evolution Controller Web UI prior to a certain version. Affected: Evolution Controller Versions 2.04.560.31.03.2024 and earlier. Root cause: poorly configured access control on the DESKTOP_EDIT_USER_GET_CARD endpoint. Impact: unauthenticated attackers can retriev...

CVE-2024-29840

Affected : Evolution Controller Web interface (versions ≤ 2.04.560.31.03.2024). Vulnerability : poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS. Impact : unauthenticated attacker can retrieve PIN value of any user. No remediation details are provided in the supplied documents.

CVE-2024-29841

Technical details for CVE-2024-29841 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-29843

The CVE-2024-29843 entry concerns the Evolution Controller web interface. According to the connected Red Hat advisory, versions 2.04.560.31.03.2024 and earlier expose a vulnerability in the MOBILE_GET_USERS_LIST endpoint due to poorly configured access control. This allows an unauthenticated atta...

CVE-2024-29842

The CVE-2024-29842 entry refers to Evolution Controller Web interface, affected in versions 2.04.560.31.03.2024 and earlier. The root cause is poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, enabling an unauthenticated attacker to retrieve the abacard field of any user. ...