CVE-2024-51560 — Improper Error Handling Vulnerability in Wave 2.0

CVE-2024-51560

Improper Error Handling Vulnerability in Wave 2.0 PUBLISHED

Description (CNA)

This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message containing sensitive information on the targeted system.

Affected (CNA)

Vendor / product	Versions
Brokerage Technology Solutions / Wave 2.0	affected <1.1.7

CWE

CWE-209

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.