PT-2024-25092 · Utarit Information · Utarit Information Soliclub

Published 2024-09-12 · Updated 2025-10-14 · CVE-2024-3305

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Utarit Information SoliClub versions prior to 4.4.0 for iOS Utarit Information SoliClub versions prior to 5.2.1 for Android

Description The issue affects Utarit Information SoliClub, allowing unauthorized actors to access sensitive data. This is due to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability, which enables the retrieval of embedded sensitive data.

Recommendations For Utarit Information SoliClub versions prior to 4.4.0 for iOS, update to version 4.4.0 or later. For Utarit Information SoliClub versions prior to 5.2.1 for Android, update to version 5.2.1 or later.

Fix

IDOR

Missing Authorization

Information Disclosure

Weakness Enumeration

CWE-639

CWE-862

CWE-200

Related Identifiers

CVE-2024-3305

Affected Products

Utarit Information Soliclub

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-3305 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3305 · Vendor Advisory
• https://twitter.com/CVEnew/status/1834221699228700989 · Twitter Post
• https://t.me/cvenotify/95260 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1457 · Note
• https://t.me/cvedetector/5470 · Telegram Post
• https://twitter.com/CveFindCom/status/1834224233339129894 · Twitter Post
• https://t.me/cveNotify/138515 · Telegram Post