CyberRota Analysis
AI-GeneratedCleo Harmony versions up to 5.8.1.10 are vulnerable due to improper privilege management in the JWT Refresh Token Handler, specifically through manipulation of the Bearer argument in the /api/connections file. This high-severity vulnerability allows for remote exploitation, potentially compromising system integrity. Organizations using affected versions should prioritize upgrading to version 5.8.1.11 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in improper privilege management. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 5.8.1.11 is sufficient to fix this issue. It is recommended to upgrade the affected component.