CVE-2024-3122
MEDIUMCHANGING Mobile - Info Disclosure
Title source: llmDescription
CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.
Scores
CVSS v3
4.9
EPSS
0.0011
EPSS Percentile
28.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-23
Status
draft
Timeline
Published
Jul 01, 2024
Tracked Since
Feb 18, 2026