CVE-2024-56114

6.5 mediumEPSS 0.3%

Medium (6.5) in henkel canlineapp. EPSS 0.3% chance of exploitation in the next 30 days.

Canlineapp Online 1.1 is vulnerable to Broken Access Control and allows users with the Auditor role to create an audit template as a result of improper authorization checks. This feature is designated for supervisor role, but auditors have been able to successfully create audit templates from their account.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2025-01-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

henkel:canlineapp

References

https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2024-56114
https://www.e-connectsolutions.com

Check your stack JSON