VulnerabilityDeferred

CVE-2024-5620

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass.

MEDIUM 6.5EPSS 0.31%

Does this matter?

Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass. This issue affects Apinizer Management Console: before 2024.05.1.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS: 0.31% probability · 24th percentile
CISA KEV: Not listed
Weakness: CWE-288
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1010
https://www.usom.gov.tr/bildirim/tr-24-1010
https://www.usom.gov.tr/bildirim/tr-24-1010

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.