PT-2024-38788 · Nomysem · Nomysem

CVE-2024-8074

·

Published

2024-11-12

·

Updated

2025-10-14

CVSS v4.0

9.3

Critical

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions: Nomysem versions prior to 13.10.2024
Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users.
Recommendations: For versions prior to 13.10.2024, update to a version released after 13.10.2024 to resolve the issue.

Fix

Missing Authentication

Improper Privilege Management

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306CWE-269CWE-862

Related Identifiers

CVE-2024-8074

Affected Products

Nomysem