CVE-2024-50618
Medium
Description
A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism. When the system is configured to allow login with internal accounts, an attacker can possibly obtain full authentication if the secret in a single-factor authentication scheme gets compromised.
SeverityMedium
CVSS4.3
Exploit probability21. percentile0.3%
ProductCipplanner Cipace
PublishedFeb 11, 2026
First seenFeb 11, 2026
Weakness typeCWE-308CWE-308
How to fix
Update
- cipplanner cipace9.17 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cipplanner cipace | v < 9.17 | 9.17 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.