CVE-2024-56114: Henkel Canlineapp

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Canlineapp Online 1.1 is vulnerable to Broken Access Control and allows users with the Auditor role to create an audit template as a result of improper authorization checks. This feature is designated for supervisor role, but auditors have been able to successfully create audit templates from their account.

Affected products

  • Henkel Canlineapp: version 1.1 only

Published 2025-01-09. Last modified 2026-06-17.