Vulnerability CVE-2024-8584
Published: 2024-09-09

Description:
Orca HCM from LEARNING DIGITAL does not properly restrict access to a specific functionality, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in.

Type:

CWE-284

 (Improper Access Control)

 References:
https://www.twcert.org.tw/tw/cp-132-8039-24e48-1.html
https://www.twcert.org.tw/en/cp-139-8040-948ef-2.html
Copyright 2026, cxsecurity.com

 

Back to Top