CVE-2024-5168

Summary

CVE-2024-5168 is an improper access control vulnerability affecting Prodys' Quantum Audio codec, specifically versions 2.3.4t and below. This issue grants unauthenticated users the ability to bypass authentication, resulting in complete bypass of authentication checks. Consequently, attackers can execute arbitrary API requests against the vulnerable web application. This vulnerability poses a significant risk and requires prompt patching to prevent potential unauthorized access and manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.