CVE-2024-3306

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Sep 12, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-330607.8Memory corruption when two threads try to map and unmap a single node simultaneously.CVE-2024-330615.5Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing CVE-2024-330637.5Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is CVE-2024-330648.2Information disclosure while parsing the multiple MBSSID IEs from the beacon.CVE-2024-330657.8Memory corruption while taking snapshot when an offset variable is set by camera driver.CVE-2024-330669.8Memory corruption while redirecting log file to any file location with any file name.CVE-2024-330675.5Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model dri CVE-2024-330686.5Transient DOS while parsing fragments of MBSSID IE from beacon frame.CVE-2024-330697.5Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.CVE-2024-33075.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's att CVE-2024-330707.5Transient DOS while parsing ESP IE from beacon/probe response frame.CVE-2024-330717.5Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.