Skip to content
OpenAdvisories
High · 8.8 CVE-2024-34520 EUVD-2025-4915GHSA-4369-mg8x-jq9f

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allow…

Published Feb 12, 2025 · Updated Feb 13, 2025 · Assigned by mitre

Description

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls.

References