CVE Daily

CVE-2024-41985

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC)...

Low CVSS 2.6

Overview

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.

CWE: CWE-613 Published: 2025-08-12T12:15:32.977
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 2.6 (LOW)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags