High severity8.1NVD Advisory· Published Nov 13, 2024· Updated Jun 17, 2026
CVE-2024-40405
CVE-2024-40405
Description
Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <7.0.3.109
Patches
Vulnerability mechanics
References
1- blog.cybelesoft.com/thinfinity-workspace-security-bulletin-nov-2024/nvdVendor Advisory
News mentions
0No linked articles in our index yet.