CVEvulnerability

CVE-2024-23551

6.5 MEDIUM Published 2024-05-07 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-05-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-522

Description

Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe consequences such as data breaches, unauthorized data manipulation, and compromised system integrity.

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References