CVE-2024-10469

CVE-2024-10469: CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.

Vendor Cert/Cc

Product VINCE

Weakness CWE-276

Published October 28, 2024

Last update August 25, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.

Key dates

02Disclosure timeline

October 28, 2024 CVE published

August 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-10469 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/276.html

Related vulnerabilities

04Related CVE

CVE-2024-1155 Incorrect permissions for shared NI SystemLink Elixir based services CVE-2023-48678 CVE-2024-11872 Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability CVE-2024-38222 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2020-36695 File and Directory Permission Vulnerability in Hitachi Command Suite