Lucene search

CVE-2024-24554

🗓️ 24 Jun 2024 08:09:15Reported by NCSC.chType

Bludit uses predictable methods with MD5 hashing to generate sensitive tokens, allowing attackers to authenticate against the API

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2024-24554 Bludit - Insecure Token Generation	24 Jun 202407:11	–	cvelist
Vulnrichment	CVE-2024-24554 Bludit - Insecure Token Generation	24 Jun 202407:11	–	vulnrichment
NVD	CVE-2024-24554	24 Jun 202408:15	–	nvd

[
  {
    "collectionURL": "https://www.bludit.com/",
    "defaultStatus": "unaffected",
    "packageName": "Bludit",
    "platforms": [
      "Linux",
      "Windows",
      "MacOS"
    ],
    "product": "Bludit",
    "repo": "https://github.com/bludit/bludit/",
    "vendor": "Bludit",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]

Source	Link
redguard	www.redguard.ch/blog/2024/06/20/security-advisory-bludit/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2024 08:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS46

EPSS0.00092

SSVC