PT-2023-19532 · Temenos · Temenos T24
Published
2023-03-21
·
Updated
2023-04-25
·
CVE-2023-24368
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Temenos T24 Release 20
Description
The issue concerns incorrect access control, potentially allowing attackers to gain unauthorized access to sensitive information. This can be achieved via a crafted POST request to the "HELPTEXT.MAINMENU" endpoint. The vendor has disputed this issue, stating that the access level granted is in line with business requirements.
Recommendations
For Temenos T24 Release 20, consider restricting access to the "HELPTEXT.MAINMENU" endpoint to minimize the risk of exploitation. As a temporary workaround, review and adjust the access control settings to ensure they align with the intended business requirements. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Temenos T24