CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform (ASP) allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform (ASP): v1.4.25.188.

Score

CVSS 4.0 8.7 High

Status

Deferred - iletisim@usom.gov.tr

Published

2024-11-18

Last modified

2026-06-02

Weaknesses

CWE-250, CWE-424

Affected products

• Application Security Platform Asp (Tr7)
• Asp (Tr7cyberdefense)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1861
• https://www.usom.gov.tr/bildirim/tr-24-1861