VYPR
← All advisories
High severity7.6NVD Advisory· Published Dec 18, 2024· Updated Apr 15, 2026

CVE-2024-49202

CVE-2024-49202

Description

Keyfactor Command before 12.5.0 has Incorrect Access Control: access tokens are over permissioned, aka 64099. The fixed versions are 11.5.1.1, 11.5.2.1, 11.5.3.1, 11.5.4.5, 11.5.6.1, 11.6.0, 12.2.0.1, 12.3.0.1, 12.4.0.1, 12.5.0, and 24.4.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Keyfactor/Commandinferred2 versions
    <12.5.0+ 1 more
    • (no CPE)range: <12.5.0
    • (no CPE)range: <12.5.0 / prior to listed patches

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.