The vulnerability identified as CVE-2024-55398 affects 4C Strategies Exonaut versions prior to 22.4. It is caused by insecure permissions (CWE-276), which can allow an attacker to gain unauthorized access to certain resources or functions. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts limited confidentiality and integrity but no availability impact. There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

Exploitation of this vulnerability could lead to unauthorized disclosure and modification of information within the affected system, impacting confidentiality and integrity. Availability is not affected. The vulnerability does not require privileges or user interaction to exploit and can be triggered remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten permissions configurations in affected versions where possible to reduce exposure.