CVE-2024-12917

Summary

CVE-2024-12917 is a Files or Directories Accessible to External Parties vulnerability affecting Agito Computer's Health4All before version 10.01.2025. The issue arises from incorrectly configured access control security levels, enabling authentication abuse and potential exploitation. External parties can gain unauthorized access to files or directories, posing a significant risk to data confidentiality and integrity. Organizations using Health4All are strongly advised to apply the necessary patches or updates to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.