Vulnerability · Published Aug 29, 2024 · Assigned by TR-CERT
CVE-2024-4428Sensetive Data Exposure in Menulux Managment Portal
Medium 6.9
In plain English
A medium-severity missing authentication in Managment Portal from Menulux Information Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.5%top 57.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Menulux Information Technologies | Managment Portal | 0 – through 21.05.2024 |
Weakness: CWE-306, CWE-862 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:L
References
- https://www.usom.gov.tr/bildirim/tr-24-1356 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1356 government-resource