PT-2025-10103 · Helpdesk · Helpdesk

Corentin + 1 · Publicado 2025-03-07 · Atualizado 2026-01-22 · CVE-2024-50394

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Helpdesk versions prior to 3.3.3

Description An improper certificate validation issue has been reported, which could allow remote attackers to compromise the system's security if exploited.

Recommendations For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

BDU:2025-02452

CVE-2024-50394

Produtos afetados

Helpdesk

Referências · 17

• https://t.me/purp_sec/351 · Publicação no Telegram
• https://twitter.com/the_yellow_fall/status/1898562274916450445 · Publicação no Twitter
• https://twitter.com/fridaysecurity/status/1898555622250979686 · Publicação no Twitter
• https://qnap.com/en/security-advisory/qsa-25-05 · Aviso do Fabricante
• https://twitter.com/Dinosn/status/1898571960025542756 · Publicação no Twitter
• https://twitter.com/Komodosec/status/1920965640825041197 · Publicação no Twitter
• https://t.me/cveNotify/149593 · Publicação no Telegram
• https://t.me/cvedetector/19848 · Publicação no Telegram
• https://twitter.com/adriananglin/status/1898676198890201326 · Publicação no Twitter
• https://t.me/cvetracker/18691 · Publicação no Telegram
• https://twitter.com/fletch_ai/status/1899324543388520693 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2024-50394 · Aviso do Fabricante
• https://twitter.com/CCBalert/status/1899527760130797950 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-50394 · Nota de Segurança
• https://t.me/pentestingnews/57600 · Publicação no Telegram