Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2024-11216

Broken Access Control in PozitifIK's Pik Online

Description

Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in PozitifIK Pik Online allows Account Footprinting, Session Hijacking. This issue affects Pik Online: before 3.1.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PozitifIK Pik Online

Default version status: affected

  • 0 to < 3.1.5affected

References