← back
CVE-2024-51559

Improper Access Control Vulnerability in Wave 2.0

CVSS 7.1 HIGHEPSS 0.3%CWE-639
This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →