AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-49581

MEDIUM · CVSS 6.5 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-02 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. Exploitation may require the attacker to be authenticated.

CVE
CVE-2024-49581
Severity
MEDIUM
CVSS
6.5
EPSS
0.37%

Original NVD Description

Restricted Views backed objects (OSV1) could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. This software bug did not impact or otherwise make data available across organizational boundaries nor did it allow for data to be viewed or accessed by unauthenticated users. The affected service have been patched and automatically deployed to all Apollo-managed Foundry instances.