PT-2025-3193 · Unknown · Canlineapp Online

Manjyot Singh · Published 2025-01-09 · Updated 2025-07-16 · CVE-2024-56114

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Canlineapp Online version 1.1

Description The issue concerns improper authorization checks, allowing users with the Auditor role to create an audit template, a feature designated for the supervisor role. This results from broken access control, enabling auditors to successfully create audit templates from their accounts.

Recommendations For Canlineapp Online version 1.1, consider restricting the create audit template function to only the supervisor role as a temporary workaround until a patch is available. Restrict access to the audit template creation feature for users with the Auditor role to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-56114

Affected Products

Canlineapp Online

References · 8

• 🔥 https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2024-56114 · Exploit
• https://osv.dev/vulnerability/CVE-2024-56114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56114 · Security Note
• https://t.me/cvenotify/129128 · Telegram Post
• https://twitter.com/CVEnew/status/1877620714796364220 · Twitter Post
• https://t.me/cvedetector/14905 · Telegram Post
• https://t.me/cvenotify/126485 · Telegram Post
• https://e-connectsolutions.com · Note