PT-2024-35667 · N-Central · N-Central

CVE-2024-5322

Published

2024-07-01

Updated

2024-07-02

CVSS v3.1

9.1

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions N-central versions prior to 2024.3

Description The issue allows session rebinding of already authenticated users when using Entra SSO, potentially leading to authentication bypass.

Recommendations For versions prior to 2024.3, update to version 2024.3 or later to resolve the issue.

Fix

Authentication Bypass Using an Alternate Path or Channel

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2024-5322

N-Central