The vulnerability identified as CVE-2024-50488 affects yespbs Token Login versions up to 1.0.3. It allows an attacker with low privileges to bypass authentication mechanisms by exploiting an alternate path or channel within the token login process. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability does not require user interaction and can be exploited remotely over the network. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to systems protected by yespbs Token Login, leading to full compromise of confidentiality, integrity, and availability of the affected environment. This could result in unauthorized data access, modification, or service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the affected service and monitoring for unusual authentication attempts. Avoid deploying affected versions in sensitive environments if possible.