CVE-2024-56236 describes a missing authorization vulnerability in Juni Hestia Nginx Cache versions up to 2.4.0. The issue arises from incorrectly configured access control security levels, which can be exploited to bypass authorization checks. The CVSS score is 4.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No official patch or vendor advisory is provided in the available data.

The vulnerability allows an attacker to exploit missing authorization controls, potentially performing unauthorized actions that affect data integrity. There is no impact on confidentiality or availability. The medium CVSS score reflects the limited scope and impact of the issue. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and correct access control configurations in Hestia Nginx Cache to ensure proper authorization enforcement. Monitor vendor communications for updates on patches or official mitigations.