Description (CNA)
Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint resulting in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
CWE-1394
References
- https://serviceware-se.com/platform/serviceware-processes
- https://security.serviceware-se.com/CVE-2024-48956/
ADP enrichment
No English description supplied.
No references supplied.