nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-2635 CVE-2024-2635
HIGH
Multiple vulnerabilities on Meta4 HR from Cegid
Record summary
CVE-2024-2635 has a selected CVSS score of 7.3 (high).
Description
The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 21, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Meta4 HRBrowse Cegid / Meta4 HRDefault status: unaffected, unknown | CVE List | 819.001.022 | affected |
References
3cegid.com
https://www.cegid.com/global/meta4-es-joins-cegid incibe.es
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-meta4-hr-cegid