CVE-2024-3774 aEnrich Technology a+HRD - Exposure of Sensitive Data
Attackers can access sensitive system configuration values by modifying a parameter in the front-end retrieval functionality of a+HRD.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-3774?
CVE-2024-3774 is a medium-severity vulnerability in aEnrich Technology a+HRD, published on 15 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing attackers to modify this parameter to access certain sensitive system configuration values.
Which versions are affected by CVE-2024-3774?
It affects 1 product.
Products include Aenrich A\+hrd.
How do I fix CVE-2024-3774?
No fix has been published for CVE-2024-3774 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-3774 being exploited?
There is no known exploitation of CVE-2024-3774 in the wild and no public exploit code.
Other vulnerabilities in aEnrich Technology a+HRD
Sources
Also known as GHSA-v26c-v53c-85v2.