Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://blog.cybelesoft.com/thinfinity-workspace-security-bulletin-nov-2024/ | Vendor Advisory |
Configurations
History
01 May 2025, 14:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cybelesoft
Cybelesoft thinfinity Workspace |
|
| CPE | cpe:2.3:a:cybelesoft:thinfinity_workspace:*:*:*:*:*:*:*:* | |
| References | () https://blog.cybelesoft.com/thinfinity-workspace-security-bulletin-nov-2024/ - Vendor Advisory |
13 Nov 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-13 23:15
Updated : 2025-05-01 14:23
NVD link : CVE-2024-40404
Mitre link : CVE-2024-40404
JSON object : View
Products Affected
cybelesoft
- thinfinity_workspace
CWE
No CWE.