PT-2025-32284
CVE-2024-42048
·
Published
2025-08-07
·
Updated
2025-08-29
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OpenOrange Business Framework version 1.15.5
Description
OpenOrange Business Framework versions 1.15.5 allows unprivileged users to write to the installation directory.
Recommendations
Restrict write access to the installation directory for unprivileged users.
Found an issue in the description? Have something to add? Feel free to write us 👾