CVE-2024-6202

Summary

CVE-2024-6202 is a vulnerability affecting HaloITSM versions up to 2.146.1. Anonymous actors can exploit this SAML XML Signature Wrapping (XSW) issue to impersonate arbitrary HaloITSM users, requiring only their email addresses. The vulnerability is resolved in HaloITSM versions beyond 2.146.1 and in patches starting from 2.143.61.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.