CVE-2024-6118

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.
References
Link Resource
https://zuso.ai/advisory/za-2024-03 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:hamastar:meetinghub_paperless_meetings:2021:*:*:*:*:*:*:*

History

30 Aug 2024, 17:44

Type Values Removed Values Added
CWE CWE-522
References () https://zuso.ai/advisory/za-2024-03 - () https://zuso.ai/advisory/za-2024-03 - Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.1
First Time Hamastar
Hamastar meetinghub Paperless Meetings
CPE cpe:2.3:a:hamastar:meetinghub_paperless_meetings:2021:*:*:*:*:*:*:*

05 Aug 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-05 05:15

Updated : 2024-08-30 17:44


NVD link : CVE-2024-6118

Mitre link : CVE-2024-6118


JSON object : View

Products Affected

hamastar

  • meetinghub_paperless_meetings
CWE
CWE-522

Insufficiently Protected Credentials