Skip to content
OpenAdvisories
Medium · 6.9 CVE-2024-4259 EUVD-2024-32811GHSA-f2h5-3j7q-vp2p

Sensetive Data Exposure in SAMPAS's AKOS

Published Sep 3, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Missing Authorization vulnerability in SAMPAŞ Holding AKOS (AkosCepVatandasService), SAMPAŞ Holding AKOS (TahsilatService) allows Collect Data as Provided by Users.

This issue affects AKOS (AkosCepVatandasService): before V2.0; AKOS (TahsilatService): before V1.0.7.

Affected products

VendorProductAffectedFixed
SAMPAŞ Holding AKOS (AkosCepVatandasService) < V2.0 V2.0
SAMPAŞ Holding AKOS (TahsilatService) < V1.0.7 V1.0.7

References