Vulnerability · Published Dec 30, 2024 · Assigned by INCD

CVE-2024-47922Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

High 7.5

In plain English

A high-severity information exposure in PRI WEB from Priority. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.5%top 57.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Affected products (as reported)

Vendor	Product	Versions
Priority	PRI WEB	All versions – before Upgrade to version 24.1 or later and enable "PRIWALL", or block direct access to the portal from the internet and use a VPN or specific addresses

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://www.gov.il/en/Departments/faq/cve_advisories