CVE-2024-0949

Critical

Description

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68.

SeverityCritical

CVSS9.8

Exploit probability—

ProductElektraweb

PublishedJun 27, 2024

First seenJun 27, 2024

Weakness typeCWE-306Missing authentication for critical function CWE-552CWE-552 CWE-798Hard-coded credentials

How to fix

Update

Talya Informatics Elektrawebv17.0.68 or later

Affected products

Product	Affected versions	Fixed in
Talya Informatics Elektraweb	v < v17.0.68	v17.0.68

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.