CVE-2024-23816 A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3),…
Description
A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3), Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3), Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3), Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3), Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3), Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3), Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3). Affected products use a hard-coded secret value for the computation of a Keyed-Hash Message Authentication Code. This could allow an unauthenticated remote attacker to gain full administrative access to the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Location Intelligence Perpetual Large 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence Perpetual Medium 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence Perpetual Non-Prod 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence Perpetual Small 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence SUS Large 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence SUS Medium 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence SUS Non-Prod 4.3 | earliest → < 4.3 | 4.3 |
| Location Intelligence SUS Small 4.3 | earliest → < 4.3 | 4.3 |