CVE-2024-6300CWE-459

Incomplete Cleanup in Conduit

Low · published June 25, 2024

CVSS v3.1
3.7
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2024-06-25T13:02Z
EPSS history
Timeline
  • 25 JUN 13:02Z
    Incomplete Cleanup in Conduit
    cvelistv5