CVE-2024-31367 is a CWE-862 Missing Authorization vulnerability in the PenciDesign Soledad product, affecting versions up to 8.4.2. The vulnerability allows an attacker with low privileges to bypass authorization controls, potentially leading to unauthorized information disclosure or modification. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, limited confidentiality impact, high integrity impact, and no availability impact. No patch or official remediation level has been published by the vendor as of the publication date.

The vulnerability can lead to unauthorized access or modification of data within the affected Soledad installations, impacting data confidentiality and integrity. There is no indication of availability impact. Since the vulnerability requires low privileges and no user interaction, it could be exploited remotely by authenticated users with limited access rights. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit access to trusted users only and monitor for unusual activity related to authorization bypass. No vendor-provided mitigation or workaround is currently documented.