PT-2024-25099 · Utarit Information · Utarit Information Soliclub
CVE-2024-3306
·
Published
2024-09-12
·
Updated
2024-09-19
CVSS v4.0
8.8
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N |
Name of the Vulnerable Software and Affected Versions
Utarit Information SoliClub versions prior to 4.4.0 for iOS
Utarit Information SoliClub versions prior to 5.2.1 for Android
Description
The issue affects Utarit Information SoliClub, allowing exploitation of incorrectly configured access control security levels through an Authorization Bypass Through User-Controlled Key.
Recommendations
For Utarit Information SoliClub versions prior to 4.4.0 for iOS, update to version 4.4.0 or later.
For Utarit Information SoliClub versions prior to 5.2.1 for Android, update to version 5.2.1 or later.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Utarit Information Soliclub