Approved changes feed: RSS · Atom
cpe:2.3:a:reedos:aim-star:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Reedos (30a4ce80-1c02-5989-b6eb-8564f1871736) |
|---|---|
| Product | Aim Star (45afd767-b4a1-53b2-9ae2-32d987363c1f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45789 |
vulnerable | 2026-06-08 06:48:09.040262 |
Parameter Tampering Vulnerability
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body on the vulnerable application.
Successful exploitation of this vulnerability could allow the attacker to bypass certain constraints in the registration process leading to creation of multiple accounts.
Published: 2024-09-11T12:00:28.464Z
Updated: 2024-09-11T13:29:41.194Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45788 |
vulnerable | 2026-06-08 06:48:09.039668 |
No Rate Limiting Vulnerability
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints which could lead to the OTP bombing/flooding on the targeted system.
Published: 2024-09-11T11:56:43.217Z
Updated: 2024-09-11T13:31:03.180Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45787 |
vulnerable | 2026-06-08 06:48:09.039184 |
Information Disclosure Vulnerability
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the API request leading to exposure of sensitive information belonging to other users.
Published: 2024-09-11T11:53:03.596Z
Updated: 2024-09-11T13:32:13.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45786 |
vulnerable | 2026-06-08 06:48:09.037116 |
Improper Authorization Vulnerability
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to gain unauthorized access to sensitive information belonging to other users.
Published: 2024-09-11T11:48:47.785Z
Updated: 2024-09-11T13:34:06.936Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.