CVE-2024-56114: Henkel Canlineapp
Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.
Canlineapp Online 1.1 is vulnerable to Broken Access Control and allows users with the Auditor role to create an audit template as a result of improper authorization checks. This feature is designated for supervisor role, but auditors have been able to successfully create audit templates from their account.
Affected products
- Henkel Canlineapp: version 1.1 only
Published 2025-01-09. Last modified 2026-06-17.