Description
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established.
Published: 2024-11-13
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 25 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Cybelesoft
Cybelesoft thinfinity Workspace
Weaknesses CWE-306
CPEs cpe:2.3:a:cybelesoft:thinfinity_workspace:*:*:*:*:*:*:*:*
Vendors & Products Cybelesoft
Cybelesoft thinfinity Workspace
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 13 Nov 2024 22:45:00 +0000

Type Values Removed Values Added
Description Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established.
References

Subscriptions

Cybelesoft Thinfinity Workspace
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-11-25T19:45:52.006Z

Reserved: 2024-07-05T00:00:00.000Z

Link: CVE-2024-40404

cve-icon Vulnrichment

Updated: 2024-11-25T19:38:32.208Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-13T23:15:03.867

Modified: 2025-05-01T14:23:53.463

Link: CVE-2024-40404

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses