PT-2026-7655 · Cipplanner · Cipace

Published 2026-02-11 · Updated 2026-02-12 · CVE-2024-50618

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CIPPlanner CIPAce versions prior to 9.17

Description A weakness exists in the Authentication component of CIPPlanner CIPAce that allows attackers to bypass a security measure. Specifically, the system’s reliance on single-factor authentication presents a risk. If the secret associated with this authentication method is compromised, an attacker could potentially gain full authentication, particularly when the system is configured to permit login with internal accounts.

Recommendations Update to version 9.17 or later.

Fix

Weakness Enumeration

CWE-308

Related Identifiers

CVE-2024-50618

Affected Products

Cipace

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-50618 · Security Note
• https://cipplanner.com/cve-2024-50618-cve-public-notification-of-resolution · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-50618 · Vendor Advisory
• https://twitter.com/CVEnew/status/2021671195284750837 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2021690395118207220 · Twitter Post
• https://t.me/cveNotify/151901 · Telegram Post