CVE-2024-50619

CVE-2024-50619 describes critical access control vulnerabilities in CIPPlanner CIPAce versions prior to 9.17, specifically within the My Account and User Management components. A low-privileged authenticated user can exploit these flaws to escalate privileges, either by tampering with client-side user IDs to access other accounts or by modifying disabled user roles to gain higher system access. With a CVSS score of 8.8 (High), this vulnerability allows for complete compromise of confidentiality, integrity, and availability (C, I, A) with low attack complexity and no user interaction required. While no active exploitation, public exploit code, or significant community discussion has been observed, the high FAUCET Risk Score of 94/100 indicates a severe potential impact if exploited.