Lucene search
INCIBECVE-2024-6426HistoryJul 03, 2024 - 12:15 p.m.
CVE-2024-6426
2024-07-0312:15:03
CWE-200
INCIBE
web.nvd.nist.gov
35
cve-2024-6426
information exposure
mesbook 20221021.03
local attacker
api value
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.1%
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
Affected configurations
Node
mesbookmesbookMatch20221021.03
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "MESbook",
"vendor": "MESbook",
"versions": [
{
"status": "affected",
"version": "20221021.03"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-6426 Information exposure vulnerability vulnerability in MESbook
2024-07-03 11:51:58
cvelist
cvelist
CVE-2024-6426 Information exposure vulnerability vulnerability in MESbook
2024-07-03 11:51:58
nvd
nvd
CVE-2024-6426
2024-07-03 12:15:03
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.1%
Related for CVE-2024-6426