Lucene search

VulDBCVE-2024-9040

HistorySep 20, 2024 - 5:15 p.m.

CVE-2024-9040

2024-09-2017:15:15

CWE-313

VulDB

web.nvd.nist.gov

vulnerability

blood bank management system

password handler

cleartext storage

local attack

CVSS2

1.4

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:M/C:P/I:N/A:N

CVSS3

2.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CVSS4

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

3.8

Confidence

High

JSON

A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation leads to cleartext storage in a file or on disk. An attack has to be approached locally.

Affected configurations

Vulners

Node

code-projectsblood_bankMatch1.0

VendorProductVersionCPE
code-projectsblood_bank1.0cpe:2.3:a:code-projects:blood_bank:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
code-projects	blood_bank	1.0	cpe:2.3:a:code-projects:blood_bank:1.0:::::::*

CNA Affected

[
  {
    "vendor": "code-projects",
    "product": "Blood Bank Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Password Handler"
    ]
  }
]

References

code-projects.org/

vuldb.com/?ctiid.278211

vuldb.com/?id.278211

CVSS2

1.4

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:M/C:P/I:N/A:N

CVSS3

2.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CVSS4

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

3.8

Confidence

High

JSON

Related for CVE-2024-9040