cbcvebase.
CVE-2024-50967
published 2025-01-17

CVE-2024-50967: The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this…

PriorityP179medium6.5CVSS 3.1
AVNACLPRNUIRSUCHINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
1.62%
73.0th percentile
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.

Detection & IOCsextracted from sources · hover to see the quote

url/rest/rights/↗
path/rest/rights/↗
  • →Unauthenticated HTTP GET request to /rest/rights/ returning HTTP 200 with JSON body containing keys 'response_type', 'model', and 'time' indicates successful exploitation of the broken access control. ↗
  • →Response Content-Type header must be 'application/json' to confirm the endpoint is responding with sensitive data. ↗
  • →HTTP status code 200 on unauthenticated GET /rest/rights/ is a strong indicator of the vulnerability being present. ↗
  • →Use Shodan, FOFA, or Google dorks to identify exposed DATAGerry instances: Shodan query 'http.title:"datagerry"', FOFA query 'title="datagerry"', Google query 'intitle:"datagerry"'. ↗
  • ·Vulnerability affects DATAGerry versions through 2.2.0 only; verify the target version before acting on detections. ↗
  • ·The Nuclei template requires all three body words ('response_type', 'model', 'time') AND application/json content-type AND HTTP 200 to fire — partial matches should not be treated as confirmed findings. ↗

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
vulncheck6.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.