CVE-2024-23747

Katalog CVE

CVSS 7.5 · High EPSS 0,69%

Kerentanan Authorization Bypass Through User-Controlled Key pada modernasistemas modernanet hospital management system 2024. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URI. By manipulating this id parameter, an attacker can gain access to sensitive medical information.

Rincian

Terbit di NVD

29 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/louiselalanne/CVE-2024-23747 exploit · advisory pihak ketiga
• https://modernasistemas.com.br/sitems/ product