This vulnerability exists in Aero due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting and manipulating the responses exchanged during the second factor authentication process.
Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for accessing other user accounts.
References
Link | Resource |
---|---|
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
06 Nov 2024, 15:59
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
References | () https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332 - Third Party Advisory | |
First Time |
63moons wave 2.0
63moons 63moons aero |
|
Summary |
|
|
CWE | NVD-CWE-Other | |
CPE | cpe:2.3:a:63moons:wave_2.0:*:*:*:*:*:*:*:* cpe:2.3:a:63moons:aero:*:*:*:*:*:*:*:* |
04 Nov 2024, 13:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-04 13:17
Updated : 2024-11-06 15:59
NVD link : CVE-2024-51561
Mitre link : CVE-2024-51561
CVE.ORG link : CVE-2024-51561
JSON object : View
Products Affected
63moons
- aero
- wave_2.0
CWE