VULNERABILITY INTELLIGENCE
CVE-2024-50967
CVSS score6.5 MEDIUM
EPSS probability1.75%
CISA KEVNot currently listed
Published2025-01-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-862