High · 7.7 CVE-2024-8040 EUVD-2024-48897GHSA-pf8q-v3qp-47xw

Authorization Bypass Through User-Controlled Key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by 3DS

Vendor: Dassault Systèmes Product: 3DSwymer

Description

An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an authenticated attacker to access some unauthorized data.

Affected products

Vendor	Product	Affected	Fixed
Dassault Systèmes	3DSwymer	Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2414	—

References

https://www.3ds.com/vulnerability/advisories