Lucene search

Veracode Vulnerability DatabaseVERACODE:46925

HistoryMay 15, 2024 - 7:54 a.m.

Inproper Authorization

2024-05-1507:54:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ant media server

improper authorization

vulnerability

http header

unauthorized users

non-administrative api calls

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

Ant Media Server Community Edition is vulnerable to Improper Authorization. The vulnerability is due to improper HTTP header based authorization which allows unauthorized users to potentially access non-administrative API calls reserved for authorized users.

CPENameOperatorVersion
ant media serverle2.9.0
ant media serverle2.9.0

CPE	Name	Operator	Version
	ant media server	le	2.9.0
	ant media server	le	2.9.0

References

antmedia.io/

cert.pl/en/posts/2024/05/CVE-2024-3462

cert.pl/posts/2024/05/CVE-2024-3462

github.com/advisories/GHSA-g95v-3pj6-j433