CVEvulnerability
CVE-2024-56898
8.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-02-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low privilege users perform actions that they aren't authorized to, which can be leveraged to escalate privileges, create, modify or delete accounts.
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://github.com/DRAGOWN/CVE-2024-56898 github.com