CVE-2024-13416CWE-532

Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log

Medium · published February 6, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log.

2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-02-06T19:09Z
EPSS history
Timeline
  • 06 FEB 19:09Z
    Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log
    cvelistv5