PT-2025-2793 · Autolib Software Systems · Autolib Software Systems Opac

Shaikh Shahnawaz · Published 2025-01-28 · Updated 2025-01-29 · CVE-2024-48310

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: AutoLib Software Systems OPAC version 20.10

Description: The issue concerns exposed API keys within the source code. Attackers may use these keys to access the backend API or other sensitive information.

Recommendations: For AutoLib Software Systems OPAC version 20.10, remove or securely store the exposed API keys to prevent unauthorized access to the backend API or sensitive information. Consider regenerating new API keys and updating the source code to use these new keys. As a temporary workaround, consider restricting access to the backend API until the issue is resolved.

Fix

Information Disclosure

Using Hardcoded Credentials

Weakness Enumeration

CWE-200

CWE-798

Related Identifiers

CVE-2024-48310

Affected Products

Autolib Software Systems Opac

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-48310 · Security Note
• https://t.me/cvedetector/16647 · Telegram Post
• https://seclists.org/fulldisclosure/2025/Jan/11 · Note
• http://seclists.org/fulldisclosure/2025/Jan/11 · Note
• https://twitter.com/CVEnew/status/1884368656953483551 · Twitter Post