Skip to content
fr Sign in
6.3 Medium

CVE-2024-46894 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3)

Description

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured users of the SFTP service and also modify that configuration.

Affected products and versions

Product Affected versions Fixed in
sinec_ins Versions not published
SINEC INS Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of sinec_ins

The 2 CVEs of sinec_ins →
CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety… Not rated
Track this CVE