CVE-2024-41701 AccuPOS – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
PublishedAccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vendor
2 published CVES affecting accupos, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.