CVE-2024-7407highCWE-261

CVE-2024-7407: falha de alta gravidade em Streamsoft Prestiż

Weak password encoding in Streamsoft Prestiż

Publicada em

Seguir esta CVE+ Monitorar Streamsoft Prestiż

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.2epss 0.4%
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are transformed.  This issue was fixed in 18.2.377 version of the software.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Streamsoft · Streamsoft Prestiż
CVEs relacionadas — Streamsoft Prestiż

No mesmo produto, das mais perigosas para as menos.

CVE-2024-11504HIGHSQL Injection in Streamsoft PrestiżEPSS 0.4%CVE-2026-0809MEDIUMWeak KSeF token encoding in Streamsoft PrestiżEPSS 0.3%