CVE-2024-6426CWE-200

Information exposure vulnerability vulnerability in MESbook

High · published July 3, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-07-03T11:51Z
EPSS history
Timeline
  • 03 JUL 11:51Z
    Information exposure vulnerability vulnerability in MESbook
    cvelistv5