Critical severity9.8NVD Advisory· Published Sep 3, 2024· Updated Jun 17, 2026

CVE-2024-4259

Description

Missing Authorization vulnerability in SAMPAŞ Holding AKOS (AkosCepVatandasService), SAMPAŞ Holding AKOS (TahsilatService) allows Collect Data as Provided by Users.

This issue affects AKOS (AkosCepVatandasService): before V2.0; AKOS (TahsilatService): before V1.0.7.

Affected products

Sambas/Akos
cpe:2.3:a:sambas:akos:*:*:*:*:*:*:*:*
Range: <=2024-09-02
SAMPAS Holding/AKOS (AkosCepVatandasService)llm-fuzzy
Range: <2.0
SAMPAS Holding/AKOS (TahsilatService)llm-fuzzy
Range: <1.0.7
SAMPAŞ Holding/AKOS (AkosCepVatandasService)v5
Range: 0
SAMPAŞ Holding/AKOS (TahsilatService)v5
Range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-24-1377nvdBroken Link
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1377nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000