CVE-2024-2635 - CVE House
Back to Database
Status published High CVE-2024-2635

Multiple vulnerabilities on Meta4 HR from Cegid

Vulnerability Description

The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2635

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Jesús Antón

References

More from Cegid

View All →
CVE-2024-2636
Multiple vulnerabilities on Meta4 HR from Cegid
Critical 9
CVE-2024-2634
Multiple vulnerabilities on Meta4 HR from Cegid
Medium 6.1
CVE-2024-2633
Multiple vulnerabilities on Meta4 HR from Cegid
Medium 6.1
CVE-2024-2632
Information Exposure Vulnerability on Meta4 HR
High 7.5

Affected Vendor

Affected Software

Meta4 HR
Vulnerable Versions:
819.001.022

Timeline

Official Publish: March 19th, 2024
Last Modified: August 21st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-698

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.