AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-3462

MEDIUM · CVSS 5.4 EPSS 0.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-05-14 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.

CVE
CVE-2024-3462
Severity
MEDIUM
CVSS
5.4
EPSS
0.48%

Original NVD Description

Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users.  All versions up to 2.9.0 (tested) and possibly newer ones are believed to be vulnerable as the vendor has not confirmed releasing a patch.