CVE-2024-55402 Details
Description
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
An access control vulnerability has been identified in 4C Strategies Exonaut versions prior to 22.4. This issue allows for improper management of user permissions, potentially leading to unauthorized actions or access within the application.
Users can upgrade to Exonaut versions 22.4 or 21.6.2.1-1 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 6, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/Jowu73/762f2240dcc56352c1e95da78ffff094 | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-284 | Improper Access Control | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| 4cstrategies exonaut | < 21.6.2.1-1 >= 22.0, < 22.4 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 5, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | Initial Analysis | [email protected] |
| Aug 6, 2025 | New CVE Received | [email protected] |
| Aug 6, 2025 | CVE Modified | CISA-ADP |