PT-2024-18269 · Ariva · Ariva Computer Accord Ors

Published 2024-09-06 · Updated 2025-10-14 · CVE-2024-1744

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Ariva Computer Accord ORS versions prior to 7.3.2.1

Description The issue allows unauthorized actors to retrieve embedded sensitive data, resulting in exposure of sensitive information. This is a critical vulnerability that affects the ability to protect sensitive data.

Recommendations For versions prior to 7.3.2.1, upgrade to version 7.3.2.1 or later to mitigate the risk of sensitive data exposure.

Fix

IDOR

Missing Authorization

Information Disclosure

Weakness Enumeration

CWE-639

CWE-862

CWE-200

Related Identifiers

CVE-2024-1744

Affected Products

Ariva Computer Accord Ors

References · 13

• https://osv.dev/vulnerability/CVE-2024-1744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1744 · Security Note
• https://t.me/cvedetector/4966 · Telegram Post
• https://twitter.com/CveFindCom/status/1832033756795769012 · Twitter Post
• https://t.me/cveNotify/138513 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1832065893376958794 · Twitter Post
• https://usom.gov.tr/bildirim/tr-24-1408 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1408 · Note
• https://twitter.com/0dayPublishing/status/1978081921809670626 · Twitter Post
• https://twitter.com/oktsec/status/1832044585251434866 · Twitter Post
• https://twitter.com/CVEnew/status/1832040440385974452 · Twitter Post
• https://t.me/latest_high_impact_cve/1105 · Telegram Post
• https://twitter.com/Coleaborat10712/status/1934071341319442638 · Twitter Post