What is the CVSS score of CVE-2024-12917?

CVE-2024-12917 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.2%.

Which versions of Agito Computer Health4All are affected by CVE-2024-12917?

CVE-2024-12917 presents notable security risk, a file access vulnerability rated CVSS 8.3.

How to fix or mitigate CVE-2024-12917?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Agito Computer Health4All CVE-2024-12917

HIGH

Files or Directories Accessible to External Parties (CWE-552)

2025-02-24 iletisim@usom.gov.tr

Information Disclosure Path Traversal

8.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:28 vuln.today

CVE Published

Feb 24, 2025 - 15:15 nvd

HIGH 8.3

DescriptionCVE.org

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-552. Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.01.2025. Version information: before 10.01.2025..

Affected ProductsAI

Agito Computer Health4All.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.