CVE-2024-38890: Horizoncloud Caterease

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks.

Affected products

• Horizoncloud Caterease: from 16.0.1.1663, up to and including 24.0.1.2405

Published 2024-08-02. Last modified 2026-06-17.