CVE-2024-42344CWE-532

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)

Medium · published September 10, 2024

CVSS v4.0
4.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-09-10T09:36Z
EPSS history
Timeline
  • 10 SEP 09:36Z
    A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)
    cvelistv5