VULNERABILITY INTELLIGENCE
CVE-2024-2635
CVSS score7.3 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2024-03-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality
Weakness classification
- cve-coordination@incibe.es: CWE-698