CVE-2024-41979

Name of the Vulnerable Software and Affected Versions: SmartClient Opcenter QL Home (SC) versions 13.2 through 2505 SmartClient SOA Audit versions 13.2 through 2505 SmartClient SOA Cockpit versions 13.2 through 2505

Description: The affected application does not enforce mandatory authorization on some functionality level at the server side. This could allow an authenticated attacker to gain complete access to the application.

Recommendations: Update SmartClient Opcenter QL Home (SC) to a version prior to 13.2 or equal to 2506. Update SmartClient SOA Audit to a version prior to 13.2 or equal to 2506. Update SmartClient SOA Cockpit to a version prior to 13.2 or equal to 2506.