CVE-2024-40408

HIGH
STIX 2.1 vulnerability

Record summary

CVE-2024-40408 has a selected CVSS score of 7.3 (high).

Description

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 25, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

thinfinity_workspace

Browse cybelesoft / thinfinity_workspace

Default status: unknown

CVE ListBefore 7.0.2.113affected

References

2