CVE-2024-51561

CVSS V2 None CVSS V3 None

Description

This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second factor authentication process. Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for accessing other user accounts.

Overview

CVE ID
CVE-2024-51561

Assigner
CERT-In

Vulnerability Status
PUBLISHED

Published Version
2024-11-04T12:29:20.563Z

Last Modified Date
2024-11-04T14:59:07.883Z

Weakness Enumerations

CWE	URL
CWE-807	http://cwe.mitre.org/data/definitions/807.html

References

Reference URL	Reference Tags
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332	third-party-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-51561
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-51561

History

Created	Old Value	New Value	Data Type	Notes
2024-11-05 13:12:59				Added to TrackCVE