CVE-2024-31846: Improper Access Control
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.6% chance of exploitation in 30 days – higher than 51% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 19 Apr 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
1. Immediately review and implement strict access control policies within the Italtel Embrace web application, ensuring that all sensitive resources require proper authorization checks before access is granted. 2. Monitor network traffic and application logs for unusual or unauthorized access attempts to sensitive resources, enabling early detection of exploitation attempts. 3. If a vendor patch becomes available, prioritize its deployment in all affected environments without delay. 4. In the absence of a patch, apply compensating controls such as network segmentation, restricting access to the application to trusted IP ranges, and using web application firewalls (WAFs) to block unauthorized requests targeting sensitive endpoints. 5. Conduct a thorough security audit of the Italtel Embrace deployment to identify and remediate any other potential access control weaknesses. 6. Educate administrators and security teams about the vulnerability and the importance of access control validation to prevent similar issues. 7. Regularly update and harden authentication and authorization mechanisms within the application to reduce the risk of future access control flaws.
Description
An issue was discovered in Italtel Embrace 1.6.4. The web application does not restrict or incorrectly restricts access to a resource from an unauthorized actor.