CVE-2024-48939
Last modified
CVE-2024-48939 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data.. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-48939?
How severe is CVE-2024-48939?
How do I fix CVE-2024-48939?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-48931ZimaOS is a fork of CasaOS, an operating system for Zima dev…7.5
- CVE-2024-48932ZimaOS is a fork of CasaOS, an operating system for Zima dev…5.3
- CVE-2024-48933A cross-site scripting (XSS) vulnerability in LemonLDAP::NG …6.1
- CVE-2024-48936SchedMD Slurm before 24.05.4 has Incorrect Authorization. A …5
- CVE-2024-48937Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.…6.1
- CVE-2024-48938Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.…7.5
- CVE-2024-4894ITPison OMICARD EDM fails to properly filter specific URL p…5.3
- CVE-2024-48941The Syracom Secure Login (2FA) plugin for Jira, Confluence, …5.4
- CVE-2024-48942The Syracom Secure Login (2FA) plugin for Jira, Confluence, …5.9
- CVE-2024-48944Server-Side Request Forgery (SSRF) vulnerability in Apache K…6.5
- CVE-2024-48948The Elliptic package 6.5.7 for Node.js, in its for ECDSA imp…4.8
- CVE-2024-48949The verify function in lib/elliptic/eddsa/index.js in the El…9.1
Are you affected by CVE-2024-48939?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST