CVEvulnerability
CVE-2024-28275
6.5 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-319
Description
Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive information in cleartext. This vulnerability allows attackers to intercept and access sensitive information, including users' credentials and password change requests.
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- https://paste.sr.ht/~edaigle/0b4a037fbd3166c8c72fee18efaa7decaf75b0ab paste.sr.ht
- https://paste.sr.ht/~edaigle/c9637d682b65e6501efb1324bba7787a2f775ff4 paste.sr.ht
- https://paste.sr.ht/~edaigle/0b4a037fbd3166c8c72fee18efaa7decaf75b0ab paste.sr.ht
- https://paste.sr.ht/~edaigle/c9637d682b65e6501efb1324bba7787a2f775ff4 paste.sr.ht