CVE-2024-41906CWE-524

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0)

Medium · published August 13, 2024

CVSS v4.0
6.3
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data stored in the local cache.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-524 · Use of Cache Containing Sensitive Information
Published
2024-08-13T07:54Z
EPSS history
Timeline
  • 13 AUG 07:54Z
    A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0)
    cvelistv5