CVE-2024-6400CWE-202CWE-312

Cleartext Storage of Username and Password in Finrota's Netahsilat

High · published October 4, 2024

CVSS v4.0
8.2
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resource Locations.

This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N
EPSS
0.00625 · 49.3th percentile
Weaknesses
CWE-202 · Exposure of Sensitive Information Through Data Queries; CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-10-04T11:12Z
EPSS history
Timeline
  • 04 OCT 11:12Z
    Cleartext Storage of Username and Password in Finrota's Netahsilat
    cvelistv5