CVE-2024-51162
High
Description
An issue in Audimex EE versions 15.1.20 and earlier allowing a remote attacker to escalate privileges. Analyzing the offline client code, it was identified that it is possible for any user (with any privilege) of Audimex to dump the whole Audimex database. This gives visibility upon password hashes of any user, ongoing audit data and more.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAudimexee
PublishedNov 20, 2024
First seenNov 20, 2024
Weakness typeCWE-276CWE-276
How to fix
Update
- audimex audimexee15.1.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| audimex audimexee | v < 15.1.20 | 15.1.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.