Improper Access Control In DestinyECM
Vulnerability Description
Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-11071
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- jskimpwn(김지섭, Jisub Kim)
- arang(유재욱, Jaewook You)
References
Affected Vendor
Cyberdigm
View all reports →