Products
PassBox
- before v1.2
Source
iletisim@usom.gov.tr
Tags
CVE-2024-7015 details
Published : Sept. 9, 2024, 2:15 p.m.
Last Modified : Sept. 9, 2024, 6:30 p.m.
Last Modified : Sept. 9, 2024, 6:30 p.m.
Description
Improper Authentication, Missing Authentication for Critical Function, Improper Authorization vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affects PassBox: before v1.2.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-285 | Improper Authorization | The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. |
References
| URL | Source |
|---|---|
| https://https://www.usom.gov.tr/bildirim/tr-24-1418 | iletisim@usom.gov.tr |
This website uses the NVD API, but is not approved or certified by it.