CVE-2024-52528
Auth Token can be passed dummy or wrong the middleware response is 200 OK
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 nov 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
BudgetControl · Gateway¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →