CVE-2024-51559 — Improper Access Control Vulnerability in Wave 2.0

CVE-2024-51559

Improper Access Control Vulnerability in Wave 2.0 PUBLISHED

Description (CNA)

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts.

Affected (CNA)

Vendor / product	Versions
Brokerage Technology Solutions / Wave 2.0	affected <1.1.7

CWE

CWE-639

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.