CVE-2024-5619 is an authorization bypass vulnerability (CWE-639) in PruvaSoft Informatics Apinizer Management Console prior to version 2024.05.1. It allows attackers with low privileges to exploit improperly configured access control security levels by controlling a key parameter, resulting in unauthorized access. The vulnerability has a CVSS 3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality and integrity with scope change. No patch or official remediation is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to a complete bypass of authorization controls, allowing attackers to access or modify sensitive information within the Apinizer Management Console. The confidentiality and integrity of the system are severely impacted. Availability is not affected. This could enable attackers to perform unauthorized administrative actions or data exfiltration depending on the environment and privileges obtained.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Apinizer Management Console to trusted users only and monitor for suspicious activity related to access control misuse. Avoid exposing the management console to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.