PT-2024-20440 · Unknown · Payment Ex

Published 2024-02-01 · Updated 2024-07-03 · CVE-2024-24548

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Payment EX versions 1.1.5b and earlier

Description The issue allows a remote unauthenticated attacker to obtain the information of the user who purchases merchandise using Payment EX.

Recommendations For Payment EX versions 1.1.5b and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-24548

Affected Products

Payment Ex

References · 7

• https://osv.dev/vulnerability/CVE-2024-24548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24548 · Security Note
• https://jvn.jp/en/jp/JVN41129639 · Note
• https://t.me/cvenotify/69501 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1753024274997125491 · Twitter Post
• https://twitter.com/RedPacketSec/status/1753359014304395554 · Twitter Post
• https://t.me/cvenotify/69547 · Telegram Post