PT-2024-33627 · Ibryl · Ibryl Switch User

Stealthcopter · Published 2024-10-23 · Updated 2024-11-07 · CVE-2024-49675

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iBryl Switch User versions 1.0.1 and earlier

Description The issue is related to an Authentication Bypass Using an Alternate Path or Channel, which affects the iBryl Switch User. This allows for authentication bypass.

Recommendations For iBryl Switch User versions 1.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2024-49675

Affected Products

Ibryl Switch User

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-49675 · Security Note
• https://osv.dev/vulnerability/CVE-2024-49675 · Vendor Advisory
• https://patchstack.com/database/vulnerability/ibryl-switch-user/wordpress-ibryl-switch-user-plugin-1-0-1-account-takeover-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/ibryl-switch-user/vulnerability/wordpress-ibryl-switch-user-plugin-1-0-1-account-takeover-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/8695 · Telegram Post
• https://twitter.com/UndercodeNews/status/1854342886336127122 · Twitter Post