Ragic Product Security Update Advisory (CVE-2024-9984)
Overview
An update has been released to address vulnerabilities in Ragic Products. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-9984
- Ragic Enterprise Cloud Database versions: ~ 2024/08/08 09:45:25 (excluded)
Resolved Vulnerabilities
Access to certain functionality was not authenticated, which could allow an unauthenticated remote attacker to obtain session cookies for all users using this functionality (CVE-2024-9984)
Vulnerability Patches
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-9984
- Ragic Enterprise Cloud Database version: 2024/08/08 09:45:25 or later version
Referenced Sites
[1] CVE-2024-9984 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-9984
[2] Ragic Enterprise Cloud Database – Missing Authentication