Vulnerabilities > CVE-2024-27288 - Incorrect Authorization vulnerability in Fit2Cloud 1Panel

047910
CVSS 3.1 - LOW
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
high complexity
fit2cloud
CWE-863

Summary

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.

Common Weakness Enumeration (CWE)