High severity7.6NVD Advisory· Published Sep 25, 2024· Updated Jul 5, 2026

CVE-2024-46607

Description

Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.java file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Thecosy/Icecms
cpe:2.3:a:thecosy:icecms:*:*:*:*:*:*:*:*
Range: <=3.4.7
IceCMS/IceCMSdescription
IceCMS/IceCMSllm-fuzzy
Range: <=3.4.7

Patches

Vulnerability mechanics

References

github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46607.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000