CVE-2024-12347: Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization
A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewmswar/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12347?
CVE-2024-12347 is classified as a critical severity vulnerability.
How do I fix CVE-2024-12347?
To remediate CVE-2024-12347, you should update the Guangzhou Huayi Intelligent Technology Jeewms to a version higher than 1.0.0.
What component is affected by CVE-2024-12347?
CVE-2024-12347 impacts the Druid Monitoring Interface component.
What file is involved in CVE-2024-12347?
The vulnerability involves the file /jeewms_war/webpage/system/druid/index.html.
What type of manipulation does CVE-2024-12347 allow?
CVE-2024-12347 allows an unknown manipulation within its affected component.