CVE-2024-12014

Summary

CVE-2024-12014 is a serious vulnerability affecting eSigna product versions 1.0 to 1.5 on all platforms. The issue involves both Path Traversal and Insecure Direct Object Reference (IDOR) flaws in the eSignaViewer component. Unauthenticated attackers can exploit these vulnerabilities by manipulating file paths and object identifiers, enabling them to access arbitrary files within the document system. This poses a significant risk to data confidentiality and integrity. Users are strongly advised to update to the latest version of eSigna as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.