Vulnerability · Published May 10, 2024 · Assigned by Snow
CVE-2024-4129Authentication bypass in Snow License Manager
High 8.8
In plain English
A high-severity improper authentication in Snow License Manager from Snow Software AB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.5%top 58.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Snow Software AB | Snow License Manager | 9.33.2 – through 9.34.0 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H