CVE-2024-57032: Critical severity wegia vulnerability
Published Jan 17, 2025
·Updated
WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field.
Affected Software
2 affected components
WeGIA WeGIA<3.2.0
WeGIA WeGIA<3.2.0
Event History
Jan 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57032?
CVE-2024-57032 has a critical severity level due to the improper access control allowing unauthorized password changes.
2
How do I fix CVE-2024-57032?
To fix CVE-2024-57032, upgrade WeGIA to version 3.2.0 or later where this vulnerability is addressed.
3
What is affected by CVE-2024-57032?
CVE-2024-57032 affects WeGIA versions prior to 3.2.0, specifically the controle/control.php component.
4
What type of vulnerability is CVE-2024-57032?
CVE-2024-57032 is categorized as an Incorrect Access Control vulnerability.
5
Can CVE-2024-57032 lead to account takeovers?
Yes, CVE-2024-57032 can potentially lead to account takeovers by allowing unauthorized users to change passwords.