PT-2024-21364 · Cegid · Cegid Meta4 Hr

Jesús Antón · Published 2024-03-19 · Updated 2024-03-19 · CVE-2024-2635

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Cegid Meta4 HR (affected versions not specified)

Description The configuration pages in Cegid Meta4 HR are not intended to be placed on an Internet-facing web server, as they expose file paths to the client, who can be an attacker. These pages do not offer product functionality and will be dismissed from future releases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-698

Related Identifiers

CVE-2024-2635

Affected Products

Cegid Meta4 Hr

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-2635 · Security Note
• https://twitter.com/CVEnew/status/1770064492355108953 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1770098144723800314 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-meta4-hr-cegid · Note