CVE-2024-36523

Exploit

EPSS 0.12%
Veröffentlicht 12.06.2024 21:15:50
Zuletzt bearbeitet 13.06.2025 14:46:07
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wvp-pro ≫ Gb28181 Version2.0 SwEditionpro

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.311

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-613 Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

https://github.com/648540858/wvp-GB28181-pro/issues/1456

Exploit

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2024-36523

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-36523

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-36523

EUVD