CVE-2024-8264CWE-532

Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05

Medium · published October 9, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

Fortra's Robot Schedule Enterprise Agent prior to version 3.05 writes FTP username and password information to the agent log file when detailed logging is enabled.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-10-09T22:44Z
EPSS history
Timeline
  • 09 OCT 22:44Z
    Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05
    cvelistv5