← CVE Intelligence

CVE-2024-29839

Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values. PUBLISHED

Description (CNA)

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD, allowing for an unauthenticated attacker to return the card value data of any user

Affected (CNA)

Vendor / productVersions
CS Technologies Australia / Evolution Controlleraffected 2.x

CWE

CWE-200, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.