CVE-2024-48536

Summary

CVE-2024-48536 is a newly discovered access control vulnerability affecting eSoft Planner version 3.24.08271-USA. This issue permits unauthorized users to access all company transactions by crafting specific web requests. The incorrect access control mechanism underlying this vulnerability can lead to sensitive financial data being exposed to attackers. Organizations using this version of eSoft Planner are urged to update to a secure release as soon as possible to mitigate this risk. Failure to address this vulnerability could result in significant financial loss or other negative consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.