Profelis Informatics Consulting · Passbox · CVE-2024-7015
**Name of the Vulnerable Software and Affected Versions**
Profelis Informatics and Consulting PassBox versions prior to 1.2
**Description**
The issue is related to improper authentication, missing authentication for critical functions, and improper authorization, allowing authentication abuse. This can lead to unauthorized access.
**Recommendations**
For versions prior to 1.2, upgrade the affected component immediately to mitigate exposure. As a temporary workaround, consider restricting access to critical functions until a patch is available.