Vulnerability Description
The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access arbitrary files uploaded by any user.
CVSS Score
5.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun.Net | Ehrd Ctms | < 10.8 |
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/en/cp-139-8167-a2c0d-2.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-8166-085c4-1.htmlThird Party Advisory
FAQ
What is CVE-2024-10439?
CVE-2024-10439 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to access arbitrary files uploaded by a...
How severe is CVE-2024-10439?
CVE-2024-10439 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-10439?
Check the references section above for vendor advisories and patch information. Affected products include: Sun.Net Ehrd Ctms.