CVE-2024-47652 HIGH

CVE-2024-47652: Insecure Authentication Vulnerability

Vendor Shilpi Computers
Product Client Dashboard
Weakness CWE-308
Published October 4, 2024
Last update October 4, 2024

CVSS base score

7.6/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N

What the vulnerability does

01Description

This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile number of targeted user, to obtain complete access to the targeted user account.

Key dates

02Disclosure timeline

October 4, 2024 CVE published
October 4, 2024 Record updated