← Database

CVE-2024-4138

MEDIUM CVSS: 4.3 Published: 2024-05-14 Modified: 2026-06-17

Description

Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.

Affected Platforms

Unknown

Weakness Type

CWE-862

References