TI-2024-02452 Aliases CVE-2024-2635 GHSA-m6qm-x65x-r3hh

Multiple vulnerabilities on Meta4 HR from Cegid

LOW 38CWE-698Published 2024-03-19 · Updated 2024-08-21

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Low · Low · Low
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00427 37th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Cegid	Meta4 HR	819.001.022	—	No fix listed	CNA

Meta4 HR VendorCegid Affected 819.001.022 Fixed in — No fix listed CNA

CPE names CISA-ADP · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:cegid:meta4_hr:819.001.022:::::::*	819.001.022	—	Cegid

cpe:2.3:a:cegid:meta4_hr:819.001.022:*:*:*:*:*:*:* Versions 819.001.022 — ·Cegid

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-2635
2026-10-03 Alias added: GHSA-m6qm-x65x-r3hh

References

Other 1

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-meta4-hr-cegid

TI-2024-02453 Multiple vulnerabilities on Meta4 HR from Cegid CVSS 3.1CRITICAL 9.0
TI-2024-02449 Information Exposure Vulnerability on Meta4 HR CVSS 3.1HIGH 7.5
TI-2024-02451 Multiple vulnerabilities on Meta4 HR from Cegid CVSS 3.1MEDIUM 6.1
TI-2024-02450 Multiple vulnerabilities on Meta4 HR from Cegid CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences