This vulnerability (CVE-2024-3306) involves an authorization bypass caused by improper access control configuration in the SoliClub app by Utarit Information. Specifically, the issue arises from the use of a user-controlled key that allows bypassing authorization checks. It affects SoliClub versions prior to 4.4.0 on iOS and 5.2.1 on Android. The CVSS 4.0 base score is 8.8 (high), indicating network attack vector, low attack complexity, no privileges or user interaction required, with high impact on confidentiality and low impact on integrity and availability. No patch or official remediation level has been disclosed, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass authorization controls in the SoliClub application, potentially accessing restricted data or functionality. The impact on confidentiality is high, while integrity and availability impacts are low. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider upgrading to SoliClub versions 4.4.0 or later on iOS and 5.2.1 or later on Android once available. Monitor vendor communications for updates. No vendor advisory or official fix has been published at this time.