Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-6400

Cleartext Storage of Username and Password in Finrota's Netahsilat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resource Locations. This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Finrota Netahsilat

Default version status: unaffected

  • 1.23.11unaffected
  • 1.23.08unaffected
  • 1.23.01unaffected
  • 1.21.10unaffected
  • 1.24.03unaffected

References