CVE-2024-34520

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls.

Published 2025-02-12. Last modified 2026-06-17.