Threat Investigation
Request a demo

CVE-2024-51556

Medium

Description

This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters through API request URL/payload leading to unauthorized access to sensitive information belonging to other users.

SeverityMedium
CVSS6.5
Exploit probability—
Product63moons Wave
PublishedNov 4, 2024
First seenNov 4, 2024
Weakness typeCWE-327CWE-327

How to fix

Update
  • 63moons wave_2.01.1.7 or later
  • 63moons aero120820241550 or later

Affected products

ProductAffected versionsFixed in
63moons wave_2.0v < 1.1.71.1.7
63moons aerov < 120820241550120820241550

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.