PT-2024-25099 · Utarit Information · Utarit Information Soliclub

Published 2024-09-12 · Updated 2024-09-19 · CVE-2024-3306

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Utarit Information SoliClub versions prior to 4.4.0 for iOS Utarit Information SoliClub versions prior to 5.2.1 for Android

Description The issue affects Utarit Information SoliClub, allowing exploitation of incorrectly configured access control security levels through an Authorization Bypass Through User-Controlled Key.

Recommendations For Utarit Information SoliClub versions prior to 4.4.0 for iOS, update to version 4.4.0 or later. For Utarit Information SoliClub versions prior to 5.2.1 for Android, update to version 5.2.1 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2024-3306

Affected Products

Utarit Information Soliclub

References · 8

• https://osv.dev/vulnerability/CVE-2024-3306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3306 · Security Note
• https://usom.gov.tr/bildirim/tr-24-1457 · Note
• https://twitter.com/CveFindCom/status/1834224178515366050 · Twitter Post
• https://t.me/cvedetector/5473 · Telegram Post
• https://twitter.com/CVEnew/status/1834221694271000931 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1457 · Note
• https://t.me/cvenotify/95261 · Telegram Post