Vulnerability · Published Feb 24, 2025 · Assigned by TR-CERT
CVE-2024-12917Improper Access Control in Agito Computer's Health4All
High 8.3
In plain English
A high-severity security flaw in Health4All from Agito Computer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.4%top 62.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Agito Computer | Health4All | 0 – before 10.01.2025 |
Weakness: CWE-552 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
References
- https://www.usom.gov.tr/bildirim/tr-25-0042 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0042 government-resource