Auth bypass in N/a

CVE-2024-42013

In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges can patch a binary in memory or on disk to bypass the password login requirement and gain full access to all functions of the program.

Vulnerability class: Broken Access Control

EPSS: 0.002 (5.6th percentile) — read the EPSS interpretation.