PT-2024-30567 · Extreme · Extreme Xds

Published 2024-07-08 · Updated 2025-10-14 · CVE-2024-4341

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Extreme XDS versions before 3928

Description The issue is related to Improper Privilege Management, allowing the collection of data as provided by users.

Recommendations For versions before 3928, update to a version 3928 or later to resolve the issue.

Fix

IDOR

Missing Authorization

Improper Privilege Management

Weakness Enumeration

CWE-639

CWE-862

CWE-269

Related Identifiers

CVE-2024-4341

Affected Products

Extreme Xds

References · 12

• https://osv.dev/vulnerability/CVE-2024-4341 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4341 · Security Note
• https://usom.gov.tr/bildirim/tr-24-0893 · Note
• https://twitter.com/cracbot/status/1810554591727215014 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0893 · Note
• https://twitter.com/CVEnew/status/1810316544788009451 · Twitter Post
• https://t.me/cveNotify/138510 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1810353711274746216 · Twitter Post
• https://t.me/cvedetector/180 · Telegram Post
• https://t.me/cvenotify/92860 · Telegram Post
• https://twitter.com/cracbot/status/1811279307861606626 · Twitter Post
• https://t.me/cveNotify/135209 · Telegram Post