What is CVE-2024-5168?

CVE-2024-5168 is a critical-severity vulnerability in Prodys Quantum Audio Codec, classified under Improper Access Control. CVSS score: 9.8/10. Published 2024-05-23.

How severe is CVE-2024-5168?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Prodys Quantum Audio Codec

CVE-2024-5168

Improper access control vulnerability in Prodys' Quantum Audio codec affecting versions 2.3.4t and below. This vulnerability could allow an unauthenticated user to bypass authentication entirely and execute arbitrary API requests against the web application.

EPSS: 0.005 (42.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Prodys Quantum Audio Codec — versions 2.3.4t

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

cve-coordination@incibe.es

Frequently asked questions

What is CVE-2024-5168?: CVE-2024-5168 is a critical-severity vulnerability in Prodys Quantum Audio Codec, classified under Improper Access Control. CVSS score: 9.8/10. Published 2024-05-23.
How severe is CVE-2024-5168?: Critical severity. CVSS v3 base score is 9.8 out of 10.