CVE-2024-38884
EUVD-2024-3766402.08.2024, 18:16
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard authentication mechanismsEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| horizoncloud | caterease | 16.0.1.1663 ≤ 𝑥 ≤ 24.0.1.2405 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| horizoncloud | caterease | 16.0.1.1663 ≤ 𝑥 ≤ 24.0.1.2405 | ADP |
Common Weakness Enumeration
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
- CWE-592 - DEPRECATED: Authentication Bypass IssuesThis weakness has been deprecated because it covered redundant concepts already described in CWE-287.