CVE-2024-40475: High severity best house rental management system vulnerability

Published Aug 8, 2024

Updated

SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/paymentreport.php, /rental/balancereport.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.

Affected Software

1 affected component

Mayurik Best House Rental Management System=1.0

Event History

Aug 8, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Aug 12, 2024

Data Sourced

via NVD·01:38 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-40475?

CVE-2024-40475 is classified as a high-severity vulnerability due to its impact on access control.

How do I fix CVE-2024-40475?

To fix CVE-2024-40475, implement proper access controls and validate user permissions for the affected PHP endpoints.

What components are affected by CVE-2024-40475?

CVE-2024-40475 affects several components including /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.

Who is affected by CVE-2024-40475?

Users of the SourceCodester Best House Rental Management System version 1.0 are affected by CVE-2024-40475.

What type of vulnerability is CVE-2024-40475?

CVE-2024-40475 is an Incorrect Access Control vulnerability.