PT-2025-6645 · Mavenir · Mavenir Sce Application Provisioning Portal

Published 2025-02-12 · Updated 2025-02-13 · CVE-2024-34521

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mavenir SCE Application Provisioning Portal version PORTAL-LBS-R 1 0 24 0

Description A directory traversal issue exists in the portal, allowing an administrative user to access system files with the file permissions of the privileged system user running the application. This could potentially lead to unauthorized access to sensitive data.

Recommendations For version PORTAL-LBS-R 1 0 24 0, as a temporary workaround, consider restricting access to sensitive system files and directories to minimize the risk of exploitation. Additionally, review the application's configuration and permissions to ensure that the privileged system user's access is limited to necessary resources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-34521

Affected Products

Mavenir Sce Application Provisioning Portal

References · 5

• 🔥 https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34521 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-34521 · Security Note
• https://t.me/cvedetector/17954 · Telegram Post
• https://twitter.com/CVEnew/status/1890150894450409927 · Twitter Post
• https://t.me/cvenotify/111147 · Telegram Post