A vulnerability was found in Cybele Software Thinfinity Workspace. It has been classified as critical. Affected is an unknown function of the component Web Sockets Connection API Endpoint. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2024-40404. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.