CVE-2024-54298

Summary

CVE-2024-54298 is a newly disclosed vulnerability affecting the Bill Minozzi Car Dealer software. This issue involves a missing authorization control, which enables unauthorized access to certain functionalities. The vulnerability can be exploited when access control security levels are incorrectly configured. The Car Dealer software, from version n/a up to 4.46, is reportedly impacted by this issue. Successful exploitation could lead to significant data compromises or system takeovers. Organizations using the Car Dealer software are advised to apply the necessary patches as soon as they become available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.