Approved changes feed: RSS · Atom

cpe:2.3:a:idmsistemas:sinergia,_sinergia_2.0,_and_sinergia_corporativo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIdmsistemas (d91868b2-48f9-5192-a54d-9b78f8e466d0)
ProductSinergia, Sinergia 2.0, And Sinergia Corporativo (216e5f42-82c6-5914-8538-fd712fc70432)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0580 vulnerable 2026-06-08 06:22:01.410970 Omission of key-controlled authorization in Qsige
MEDIUM (6.5)
Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerability allows an attacker to extract sensitive information from the API by making a request to the parameter '/qsige.locator/quotePrevious/centers/X', where X supports values 1,2,3, etc.
Published: 2024-01-18T08:47:16.711Z
Updated: 2025-06-02T15:04:10.228Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.