CVE-2024-23537: Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.
Published Mar 29, 2024
·Updated
Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Affected Software
1 affected component
Apache Fineract<1.9.0
Event History
Mar 29, 2024
CVE Published
via MITRE·02:38 PM
Data Sourced
via MITRE·02:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23537?
CVE-2024-23537 is categorized as a vulnerability related to improper privilege management.
2
How do I fix CVE-2024-23537?
To fix CVE-2024-23537, upgrade Apache Fineract to version 1.9.0 or later.
3
What versions of Apache Fineract are affected by CVE-2024-23537?
CVE-2024-23537 affects all versions of Apache Fineract prior to 1.8.5.
4
Who is impacted by CVE-2024-23537?
Organizations using Apache Fineract versions below 1.8.5 are at risk due to CVE-2024-23537.
5
Is there a patch available for CVE-2024-23537?
Yes, upgrading to Apache Fineract version 1.9.0 resolves the issue associated with CVE-2024-23537.