PT-2026-33372 · Unknown · Vision Helpdesk

Published 2024-09-17 · Updated 2026-04-17 · CVE-2024-58343

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vision Helpdesk versions prior to 5.6.10

Description An issue allows attackers to read user profiles by modifying serialized cookie data associated with the vis client id variable.

Recommendations Update to version 5.6.10 or later.

Exploit

Fix

Weakness Enumeration

CWE-425

Related Identifiers

BDU:2026-07545

CVE-2024-58343

Affected Products

Vision Helpdesk

References · 6

• 🔥 https://github.com/websec/Vision-Helpdesk-Exploit · Exploit
• https://bdu.fstec.ru/vul/2026-07545 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-58343 · Security Note
• https://twitter.com/CVEnew/status/2045102635569631234 · Twitter Post
• https://visionhelpdesk.com/products/help-desk-software · Note
• https://websec.net/blog/critical-vulnerability-in-vision-helpdesk-allows-unauthorized-session-access-67264646bde7fa99ea26446f · Note