A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.
References
Link | Resource |
---|---|
https://zuso.ai/advisory/za-2024-03 | Third Party Advisory |
Configurations
History
30 Aug 2024, 17:44
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-522 | |
References | () https://zuso.ai/advisory/za-2024-03 - Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
First Time |
Hamastar
Hamastar meetinghub Paperless Meetings |
|
CPE | cpe:2.3:a:hamastar:meetinghub_paperless_meetings:2021:*:*:*:*:*:*:* |
05 Aug 2024, 05:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-05 05:15
Updated : 2024-08-30 17:44
NVD link : CVE-2024-6118
Mitre link : CVE-2024-6118
JSON object : View
Products Affected
hamastar
- meetinghub_paperless_meetings
CWE
CWE-522
Insufficiently Protected Credentials