PT-2024-36649 · Torod · Torod

Mika · Published 2024-12-31 · Updated 2024-12-31 · CVE-2024-55995

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Torod versions n/a through 1.7

Description The issue is caused by incorrectly configured access control security levels, allowing exploitation of missing authorization. This enables unauthorized access via misconfigured controls.

Recommendations For Torod versions n/a through 1.7, consider reconfiguring access control security levels to properly restrict access and mitigate the risk of exploitation. As a temporary workaround, review and adjust the existing security settings to ensure correct authorization is enforced.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-55995

Affected Products

Torod

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-55995 · Security Note
• https://patchstack.com/database/wordpress/plugin/torod/vulnerability/wordpress-torod-plugin-1-7-settings-change-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1874096361412423832 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1874173437226201271 · Twitter Post
• https://t.me/cvenotify/105827 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/torod/vulnerability/wordpress-torod-plugin-1-7-settings-change-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/14036 · Telegram Post