← voltar
CVE-2024-6118

Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password

CVSS 9.3 CRITICALEPSS 0.5%CWE-256
A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Hamastar Technology · MeetingHub Paperless Meetings

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://zuso.ai/advisory/za-2024-03