How severe is CVE-2024-45789?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.3 out of 10.

What type of vulnerability is CVE-2024-45789?

This is classified as CWE-354, which is a common weakness in software security.

CVE-2024-45789 - MEDIUM Severity | CVSS 4.3

Vulnerability Description

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body on the vulnerable application. Successful exploitation of this vulnerability could allow the attacker to bypass certain constraints in the registration process leading to creation of multiple accounts.

Related Vulnerabilities

CVE-2021-20184

MEDIUM

CVSS:4.3(Medium)

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades.

CWE-3542021

CVE-2023-50738

MEDIUM

CVSS:4.3(Medium)

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.

CWE-3542023

CVE-2024-23461

MEDIUM

CVSS:4.2(Medium)

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on...

CWE-3542024

CVE-2024-49406

MEDIUM

CVSS:4.4(Medium)

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

CWE-3542024

CVE-2020-1802

MEDIUM

CVSS:4.6(Medium)

There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploi...

CWE-3542020

CVE-2020-1834

MEDIUM

CVSS:4.6(Medium)

HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an insufficient integrity check vulnerability. The system does ...

CWE-3542020