What is CVE-2024-48955?

CVE-2024-48955 is a high-severity vulnerability in N/a, classified under Improper Access Control. CVSS score: 8.1/10. Published 2024-10-29.

How severe is CVE-2024-48955?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2024-48955 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2024-48955

Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the functionalities menus, the return of this call is not encrypted and as the system does not validate the session authorization, an attacker can copy the content of the browser of a user with greater privileges having access to the functionalities of the user that the code was copied.

EPSS: 0.006 (48.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2024-48955?: CVE-2024-48955 is a high-severity vulnerability in N/a, classified under Improper Access Control. CVSS score: 8.1/10. Published 2024-10-29.
How severe is CVE-2024-48955?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2024-48955 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.