CVE-2024-33329

EUVD-2024-31071
A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other sensitive information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
lumislumis_experience_platform
15.0.0 ≤
𝑥
< 16.2.0
ADP
Common Weakness Enumeration
References
http://seclists.org/fulldisclosure/2024/Jul/7
https://gist.github.com/rodnt/f6b3a2ac875b8f13656063eefbfd9812
http://seclists.org/fulldisclosure/2024/Jul/7
https://gist.github.com/rodnt/f6b3a2ac875b8f13656063eefbfd9812