CVE-2024-36464CWE-256

Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

Low · published November 27, 2024

CVSS v3.1
2.7
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.7th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2024-11-27T14:01Z
EPSS history
Timeline
  • 27 NOV 14:01Z
    Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported
    cvelistv5