The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain functionalities.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-8165-7da2f-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-8164-fe7c5-1.html | Third Party Advisory |
Configurations
History
25 Sep 2025, 14:13
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:* | |
| First Time |
Sun.net ehrd Ctms
|
31 Oct 2024, 00:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sun.net
Sun.net ehdr Ctms |
|
| References | () https://www.twcert.org.tw/en/cp-139-8165-7da2f-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-8164-fe7c5-1.html - Third Party Advisory | |
| CPE | cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:* |
28 Oct 2024, 13:58
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
28 Oct 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-28 03:15
Updated : 2025-09-25 14:13
NVD link : CVE-2024-10438
Mitre link : CVE-2024-10438
CVE.ORG link : CVE-2024-10438
JSON object : View
Products Affected
sun.net
- ehrd_ctms
CWE
CWE-288
Authentication Bypass Using an Alternate Path or Channel