CVE-2024-12367
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-09-16
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| vegagrup | vega_master | 1.12.35 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-497 | The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to sensitive system information, which may result in information disclosure, potential exploitation by attackers, and compromise of system confidentiality, integrity, and availability.
Can you explain this vulnerability to me?
This vulnerability is an Exposure of Sensitive System Information to an Unauthorized Control Sphere in Vegagrup Software Vega Master. It allows Directory Indexing, meaning unauthorized users can view directory contents that should be restricted, potentially exposing sensitive information.