CVE-2024-54147

Summary

CVE-2024-54147 is a vulnerability affecting the Altair GraphQL Client prior to version 8.0.5. This issue allows man-in-the-middle attacks to intercept all requests in the desktop app, compromising all GraphQL request and response headers and bodies. Untrusted networks, such as public Wi-Fi or malicious DNS servers, pose significant risk. The attacker can obtain full access to signed-in Altair GraphQL Cloud accounts and replace payment checkout pages with malicious websites. The vulnerability has been addressed in version 8.0.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.