CVE-2024-45919

Summary

CVE-2024-45919 is a newly identified vulnerability in Solvait version 24.4.2. This issue enables attackers to manipulate the Request ID and Action Type parameters in the /AssignToMe/SetAction endpoint. By doing so, they can bypass approval workflows, potentially gaining unauthorized access to sensitive data or approving fraudulent requests, thereby escalating their privileges. This vulnerability poses a serious risk to systems that use Solvait and could result in significant data breaches or financial losses. Organizations running affected versions of Solvait are urged to apply the available patch or implement alternative mitigation strategies to protect their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.