Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-10081 Details

Description

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the API URL ends with Authentication. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. All endpoints, apart from the /Authentication is affected by the vulnerability. This issue affects CodeChecker: through 6.24.1.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:10 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CNA: EricssonCVSS-B:10 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/Ericsson/codechecker/security/advisories/GHSA-f3f8-vx3w-hp5q	Ericsson	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-288	Authentication Bypass Using an Alternate Path or Channel	Ericsson
CWE-420	Unprotected Alternate Channel	Ericsson

Affected Products

Product	Versions
ericsson codechecker	< 6.24.2
CPE cpe:2.3:a:ericsson:codechecker:::::::: Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	Ericsson
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 14, 2025	Initial Analysis	[email protected]
Nov 6, 2024	New CVE Received	Ericsson