CVE-2024-12367

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Master allows Directory Indexing. This issue affects Vega Master: from v.1.12.35 through 20250916.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

Score

CVSS 3.1 8.6 High

Status

Deferred - iletisim@usom.gov.tr

Published

2025-09-16

Last modified

2026-06-01

Weaknesses

CWE-497

Affected products

• Vega Master (Vegagrup Software)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0249
• https://www.usom.gov.tr/bildirim/tr-25-0249