PT-2024-35423 · Unknown · Wms-Warehouse Management System-Zeqp

Linf2009 · Published 2024-12-02 · Updated 2024-12-03 · CVE-2024-52732

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions wms-Warehouse management system-zeqp version 2.20.9.1

Description The issue is related to incorrect access control due to the reuse of the token value of the zeqp system. This allows unauthorized access.

Recommendations For version 2.20.9.1, consider disabling the token reuse mechanism as a temporary workaround until a patch is available. Restrict access to sensitive areas of the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-52732

Affected Products

Wms-Warehouse Management System-Zeqp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-52732 · Security Note
• https://github.com/dotNetTreasury/WMS/blob/master/README.md · Note
• https://github.com/dotNetTreasury/WMS/tree/master/src · Note
• https://twitter.com/CVEnew/status/1863611853425021256 · Twitter Post
• https://t.me/cvedetector/11787 · Telegram Post
• https://gist.github.com/LINF2009/fe2f0681389d4521d236a34ec2109a24 · Note