CVE-2024-10438
HIGHeHRD CTMS < 10.14 - Unauthenticated Authentication Bypass
Title source: llmDescription
The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain functionalities.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
https://www.twcert.org.tw/tw/cp-132-8164-fe7c5-1.html
Third Party Advisory third-party-advisory
https://www.twcert.org.tw/en/cp-139-8165-7da2f-2.html
Scores
CVSS v3
7.5
EPSS
0.0052
EPSS Percentile
39.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-288
Status
published
Products (1)
sun.net/ehrd_ctms
< 10.14
Published
Oct 28, 2024
Tracked Since
Feb 18, 2026