CVE-2024-10081 - CVE House
Back to Database
Status published Critical CVE-2024-10081

CodeChecker is an analyzer tooling, defect database and viewer extension...

Vulnerability Description

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the API URL ends with Authentication. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. All endpoints, apart from the /Authentication is affected by the vulnerability. This issue affects CodeChecker: through 6.24.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-10081

Credits & Attribution

No credits recorded in the NVD database.

References

More from Ericsson

View All →
CVE-2025-59174
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain...
High 7.1
CVE-2025-40843
Buffer overflow in CodeChecker log command
Medium 5.9
CVE-2025-40842
Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation Vulnerability
High 8.5
CVE-2025-40841
Ericsson Indoor Connect 8855 - Cross-Site Request Forgery Vulnerability
Medium 5.1
CVE-2025-40838
Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials Vulnerability
Medium 5.1

Affected Vendor

Affected Software

CodeChecker
Vulnerable Versions:
0

Timeline

Official Publish: November 6th, 2024
Last Modified: November 6th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Weaknesses (CWE)

CWE-288 CWE-420

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1098 Account Manipulation
Privilege Escalation