CVE-2024-22156 is classified as CWE-862 (Missing Authorization) in SNP Digital SalesKing versions through 1.6.15. This vulnerability permits unauthorized access to functionality or data that should be protected by authorization controls. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or official remediation level has been published by the vendor as of the current data. The vulnerability is not known to be exploited in the wild.

The vulnerability allows unauthorized users to perform certain actions within SalesKing that should require authorization, potentially leading to limited integrity and availability impacts. Confidentiality is not affected. The medium severity score reflects the moderate risk posed by this issue. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected SalesKing instances to trusted users only and review authorization configurations to limit exposure.