CVE-2024-0912CWE-532

CCURE passwords exposed to administrators

High · published June 5, 2024

CVSS v4.0
8.5
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
EPSS
0.00164 · 5.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-06-05T23:23Z
EPSS history
Timeline
  • 05 JUN 23:23Z
    CCURE passwords exposed to administrators
    cvelistv5