CVE-2026-57475

5.3 Moyenne

Publiée le 10/07/2026 à 20:16 · Modifiée le 03/08/2026 à 21:16 · Analyse NVD en cours · Source : 9119a7d8-5eab-497f-8521-727c672e3725

Description

Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.

Traduire en français

Produits concernés

Deloitte AI Assist for Customer

Scores CVSS

Version	Score	Source	Vecteur
4.0	6.9 Moyenne	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	5.3 Moyenne	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-306

Références

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-191-01.json Technical Description
https://www.cve.org/CVERecord?id=CVE-2026-57475
https://zerotolerance.me/advisories/assets/VU487875-deloitte-ascend-advisory.pdf Third Party Advisory
https://zerotolerance.me/advisories/deloitte-aiassist-ascend-2026-vu487875/ Third Party Advisory

CVE-2026-57475

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs