Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels. A low-privileged authenticated user can gain access to other people's accounts by tampering with the client's user id to change their account information. A low-privileged authenticated user can elevate his or her system privileges by modifying the information of a user role that is disabled in the client.
Metrics
Affected Vendors & Products
References
History
Wed, 11 Feb 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to escalate their access levels. A low-privileged authenticated user can gain access to other people's accounts by tampering with the client's user id to change their account information. A low-privileged authenticated user can elevate his or her system privileges by modifying the information of a user role that is disabled in the client. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-02-11T21:45:34.056Z
Reserved: 2024-10-27T00:00:00.000Z
Link: CVE-2024-50619
No data.
Status : Received
Published: 2026-02-11T22:15:50.020
Modified: 2026-02-11T22:15:50.020
Link: CVE-2024-50619
No data.
OpenCVE Enrichment
No data.