CVE-2024-46892

Summary

CVE-2024-46892 is a newly identified cybersecurity vulnerability affecting SINEC INS software, versions prior to V1.0 SP2 Update 3. This issue arises due to the application's failure to invalidate active sessions following the deletion, disabling, or permission modifications of associated user accounts. As a result, an authenticated attacker could potentially maintain their access to the system and carry out malicious activities despite having their user account disabled. This vulnerability poses a significant risk to system security and should be addressed promptly with the recommended software update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.