Lucene search

MitreCVE-2024-38891

HistoryAug 02, 2024 - 9:16 p.m.

CVE-2024-38891

2024-08-0221:16:30

CWE-319

mitre

web.nvd.nist.gov

caterease

security flaw

sensitive information

cleartext transmission

network traffic attack

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Sniffing Network Traffic attack due to the cleartext transmission of sensitive information.

Affected configurations

Nvd

Node

horizoncloudcatereaseRange16.0.1.1663–24.0.1.2405

VendorProductVersionCPE
horizoncloudcaterease*cpe:2.3:a:horizoncloud:caterease:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
horizoncloud	caterease	*	cpe:2.3:a:horizoncloud:caterease::::::::

References

caterease.com

horizon.com

packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html

vuldb.com/?id.273375

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

Related for CVE-2024-38891