Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-45786

Improper Authorization Vulnerability

Description

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to gain unauthorized access to sensitive information belonging to other users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star)

Default version status: unaffected

  • 2.0.1affected

References