PT-2024-16087 · Didi Ddmq · Didi Ddmq

Gaogaostone · Published 2024-10-19 · Updated 2024-10-22 · CVE-2024-10173

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions didi DDMQ version 1.0

Description A critical vulnerability has been found in the Console Module component of didi DDMQ, affecting an unknown functionality. The manipulation of the input /;login leads to improper authentication. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Improper Authentication

Weakness Enumeration

CWE-863

CWE-287

Related Identifiers

CVE-2024-10173

Affected Products

Didi Ddmq

References · 13

• 🔥 https://github.com/didi/DDMQ/issues/37#issue-2577905007 · Exploit
• 🔥 https://github.com/didi/DDMQ/issues/37 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-10173 · Security Note
• https://github.com/didi/DDMQ · Note
• https://t.me/latest_high_impact_cve/1362 · Telegram Post
• https://vuldb.com/?submit.421516 · Note
• https://twitter.com/VulmonFeeds/status/1848033010630754511 · Twitter Post
• https://t.me/cvenotify/98873 · Telegram Post
• https://twitter.com/CVEnew/status/1847869216080142655 · Twitter Post
• https://vuldb.com/?id.280957 · Note
• https://t.me/cvenotify/99107 · Telegram Post
• https://t.me/cvedetector/8383 · Telegram Post
• https://vuldb.com/?ctiid.280957 · Note