CVE-2024-24539: Medium severity fusionpbx vulnerability
Published Mar 18, 2024
·Updated
FusionPBX before 5.2.0 does not validate a session.
Affected Software
2 affected components
FusionPBX Fusionpbx<5.2.0
FusionPBX Fusionpbx<5.2.0
Remediation
Event History
Mar 18, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-24539?
CVE-2024-24539 has been classified with a high severity level due to the potential for session hijacking.
2
How do I fix CVE-2024-24539?
To mitigate CVE-2024-24539, upgrade FusionPBX to version 5.2.0 or later, where the session validation issue is resolved.
3
What are the potential impacts of CVE-2024-24539?
The lack of session validation in CVE-2024-24539 can lead to unauthorized access and potentially compromise user accounts.
4
Which versions of FusionPBX are affected by CVE-2024-24539?
CVE-2024-24539 affects all versions of FusionPBX prior to 5.2.0.
5
Is CVE-2024-24539 being actively exploited?
As of now, there have been no confirmed reports of active exploitation of CVE-2024-24539.