CVE-2024-58343 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.
Medium CVSS: 4.3

CVE-2024-58343

Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.
Vendor
-
Product
-
CWE
CWE-425
Yayın Tarihi
2026-04-16 23:16:32
Güncelleme
2026-04-16 23:16:32
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-425 MEDIUM 2026

Referanslar

https://github.com/websec/Vision-Helpdesk-Exploit https://websec.net/blog/critical-vulnerability-in-vision-helpdesk-allows-unauthorized-session-access-67264646bde7fa99ea26446f