Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-42344

Опубликовано: 10 сент. 2024
Источник: nvd
CVSS3: 4.4
CVSS3: 5.5
EPSS Низкий

Описание

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:siemens:sinema_remote_connect_client:*:*:*:*:*:*:*:*
Версия до 3.2 (исключая)
cpe:2.3:a:siemens:sinema_remote_connect_client:3.2:-:*:*:*:*:*:*
cpe:2.3:a:siemens:sinema_remote_connect_client:3.2:hf1:*:*:*:*:*:*
cpe:2.3:a:siemens:sinema_remote_connect_client:3.2:sp1:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00093
Низкий

4.4 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 4.4
github
больше 1 года назад

A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive information into a log file which is readable by all legitimate users of the underlying system. This could allow an authenticated attacker to compromise the confidentiality of other users' configuration data.

EPSS

Процентиль: 26%
0.00093
Низкий

4.4 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-532