CVE-2024-6406
Last modified
CVE-2024-6406 is a high-severity vulnerability rated 8.5/10 on the CVSS scale. Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobile Library Application allows Retrieve Embedded Sensitive Data. This issue affects Mobile Library Application: before 5.0.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobile Library Application allows Retrieve Embedded Sensitive Data. This issue affects Mobile Library Application: before 5.0.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-6406?
How severe is CVE-2024-6406?
How do I fix CVE-2024-6406?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-6398An information disclosure vulnerability in SWG in versions 1…5.3
- CVE-2024-6400Cleartext Storage of Sensitive Information, Exposure of Sens…7.5
- CVE-2024-6401Improper Neutralization of Special Elements used in an SQL C…9.8
- CVE-2024-6402A vulnerability classified as critical was found in Tenda A3…9.8
- CVE-2024-6403A vulnerability, which was classified as critical, has been …9.8
- CVE-2024-6405The Floating Social Buttons plugin for WordPress is vulnerab…5.4
- CVE-2024-6407CWE-200: Information Exposure vulnerability exists that coul…7.5
- CVE-2024-6408The Slider by 10Web WordPress plugin before 1.2.57 does not…5.4
- CVE-2024-6409A race condition vulnerability was discovered in how signals…7
- CVE-2024-6410The ProfileGrid – User Profiles, Groups and Communities plug…4.3
- CVE-2024-6411The ProfileGrid – User Profiles, Groups and Communities plug…8.8
- CVE-2024-6412The HTML Forms WordPress plugin before 1.3.34 does not have…6.5
Are you affected by CVE-2024-6406?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST