CVE-2024-9984: Ragic Enterprise Cloud Database - Missing Authentication
Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9984?
CVE-2024-9984 is considered high severity due to the risk of unauthenticated access leading to potential session hijacking.
How do I fix CVE-2024-9984?
To fix CVE-2024-9984, ensure that proper authentication mechanisms are implemented for all functionalities in the Ragic Enterprise Cloud Database.
Which versions of Ragic are affected by CVE-2024-9984?
CVE-2024-9984 affects all versions of Ragic Enterprise Cloud Database prior to 2024-08-08.
Can CVE-2024-9984 be exploited remotely?
Yes, CVE-2024-9984 can be exploited remotely due to the lack of authentication for certain functionalities.
What are the risks associated with CVE-2024-9984?
The risks associated with CVE-2024-9984 include unauthorized access to user session cookies and potential session hijacking.