CVE-2024-3122

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.

Score

CVSS 3.1 4.9 Medium

Status

Deferred - twcert@cert.org.tw

Published

2024-07-01

Last modified

2024-08-01

Weaknesses

CWE-23

Affected products

• Mobile One Time Password (Changing)

References

• https://www.twcert.org.tw/en/cp-139-7912-4c800-2.html
• https://www.twcert.org.tw/tw/cp-132-7911-0962e-1.html