PatchTheCVEthinfinity workspace vulnerabilities and fixes
Recent CVEs affecting thinfinity workspace, with upgrade or downgrade steps. 5 tracked.
Also searched as: thinfinityworkspace.
thinfinity workspace has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-11-13. Highest priority: CVE-2024-40404 (score 49/100).
- CVE-2024-40410 MEDIUM 4.8 UPGRADE Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key
- CVE-2024-40408 HIGH 7.3 UPGRADE Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in th
- CVE-2024-40407 HIGH 7.5 UPGRADE A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain th
- CVE-2024-40405 HIGH 8.1 UPGRADE Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain ac
- CVE-2024-40404 CRITICAL 9.8 UPGRADE Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in th
FAQ
How do I fix thinfinity workspace vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thinfinity workspace being exploited right now?
None of the tracked thinfinity workspace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thinfinity workspace CVE should I patch first?
CVE-2024-40404 currently ranks highest (49/100): Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in th.