CVE-2024-9984

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
Ragic	Enterprise Cloud Database	< 2024/08/08 09:45:25
ragic	enterprise_cloud_database	< 2024-08-08

References

https://www.twcert.org.tw/en/cp-139-8151-1a4b5-2.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-8150-c955a-1.htmlThird Party Advisory

Timeline

Published: Oct 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-99859.8Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a we CVE-2024-99869.8A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown CVE-2024-99878.8A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issu CVE-2024-99889.8The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19. This is due to missing valida CVE-2024-99899.8The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is due to a limited arbi CVE-2024-99908.8The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This is due to missing n CVE-2024-99917.0This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the device firmware. An attac CVE-2024-99935.4The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerabl CVE-2024-99945.4The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerabl CVE-2024-99967.8A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malici CVE-2024-99977.8A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious a CVE-2024-99996.5In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows