« Volver al listado

CVE-2024-41696

Estado: AplazadaAlta (7.5)—

Priority

PRI WEB Portal Add-On for Priority ERP on prem

- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Priority — WEB Portal Add-onAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-41696",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-41696",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-31T14:43:58.956777Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cna@cyber.gov.il",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cna@cyber.gov.il",
      "affectedData": [
        {
          "vendor": "Priority",
          "product": "PRI WEB Portal Add-On for Priority ERP on prem",
          "versions": [
            {
              "status": "affected",
              "version": "All versions",
              "lessThan": "Upgrade to version 24.0 or later (that includes \"PRIWALL\").",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:priority-software:pri_web_portal_add_on:*:*:*:*:*:*:*:*"
          ],
          "vendor": "priority-software",
          "product": "pri_web_portal_add_on",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "24.0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-07-30T09:15:04.927",
  "references": [
    {
      "url": "https://www.gov.il/en/Departments/faq/cve_advisories",
      "source": "cna@cyber.gov.il"
    },
    {
      "url": "https://www.gov.il/en/Departments/faq/cve_advisories",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cna@cyber.gov.il",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Priority \n\nPRI WEB Portal Add-On for Priority ERP on prem\n\n- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"
    },
    {
      "lang": "es",
      "value": " Complemento del portal WEB Priority PRI para Priority ERP on prem- CWE-200: exposición de información confidencial a un actor no autorizado"
    }
  ],
  "lastModified": "2026-06-17T07:48:04.073",
  "sourceIdentifier": "cna@cyber.gov.il"
}