PT-2025-34365 · Liveshare · Mindmanager

Published 2025-08-22 · Updated 2025-08-27 · CVE-2024-56179

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: MindManager versions prior to 24.1.150

Description: In MindManager for Windows, a directory traversal issue allows attackers to potentially write to unexpected directories on a victim’s machine. This occurs when a user opens file attachments located in malicious mmap files.

Recommendations: Update MindManager to version 24.1.150 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-56179

Affected Products

Mindmanager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-56179 · Security Note
• https://alludo.com · Note
• https://pastebin.com/Ax078JVF · Note
• https://twitter.com/CVEnew/status/1958890008498049354 · Twitter Post
• https://t.me/CVEtracker/30673 · Telegram Post
• https://twitter.com/cracbot/status/1960658598469444032 · Twitter Post