CVE-2024-6737
High
Description
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account.
SeverityHigh
CVSS8.8
Exploit probability—
ProductElectronic Official Document Management System
PublishedJul 15, 2024
First seenJul 15, 2024
Weakness typeCWE-284Improper access control
How to fix
Update
- electronic_official_document_management_system_project electronic_official_document_management_system5.0.77 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| electronic_official_document_management_system_project electronic_official_document_management_system | v < 5.0.77 | 5.0.77 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.