PT-2024-34544 · Audimexee · Audimexee

Leo Georget

·

CVE-2024-51162

·

Published

2024-11-20

·

Updated

2025-01-09

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Audimex EE versions 15.1.20 and earlier
Description: The issue allows a remote attacker to escalate privileges. It is possible for any user of Audimex to dump the whole Audimex database, giving visibility to password hashes of any user, ongoing audit data, and more.
Recommendations: For Audimex EE versions 15.1.20 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-51162

Affected Products

Audimexee