Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-45787

Information Disclosure Vulnerability

Description

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the API request leading to exposure of sensitive information belonging to other users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Reedos Software Solutions Mutual Fund Distribution Product (aiM-Star)

Default version status: unaffected

  • 2.0.1affected

References