CVE-2024-51560 Vulnerability Details

  /     /     /  

CVE-2024-51560 Metadata Quick Info

CVE Published: 04/11/2024 | CVE Updated: 04/11/2024 | CVE Year: 2024
Source: CERT-In | Vendor: Brokerage Technology Solutions | Product: Wave 2.0
Status : PUBLISHED

---

CVE-2024-51560 Description

This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message containing sensitive information on the targeted system.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-209
CWE Name: CWE-209: Generation of Error Message Containing Sensitive Information
Source: Brokerage Technology Solutions

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).