This vulnerability (CVE-2024-5618) affects the Apinizer Management Console from PruvaSoft Informatics and is categorized under CWE-732 (Incorrect Permission Assignment for Critical Resource). It allows users with limited privileges to access functionality that should be restricted by ACLs, potentially leading to full compromise of the system. The issue affects versions before 2024.05.1. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with limited privileges to gain unauthorized access to critical functions within the Apinizer Management Console, resulting in full compromise of the system's confidentiality, integrity, and availability. This could lead to unauthorized data access, modification, or disruption of services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Apinizer Management Console to trusted administrators only and monitor for any unusual activity related to permission escalations. Avoid granting unnecessary privileges to users.