Lucene search

[email protected]NVD:CVE-2024-38254

HistorySep 10, 2024 - 5:15 p.m.

CVE-2024-38254

2024-09-1017:15:31

CWE-908

[email protected]

web.nvd.nist.gov

windows

authentication

information

disclosure

vulnerability

cve-2024-38254

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

20.2%

JSON

Windows Authentication Information Disclosure Vulnerability

Affected configurations

Nvd

Node

microsoftwindows_10_1507Range<10.0.10240.20766x64

microsoftwindows_10_1507Range<10.0.10240.20766x86

microsoftwindows_10_1607Range<10.0.14393.7336x64

microsoftwindows_10_1607Range<10.0.14393.7336x86

microsoftwindows_10_1809Range<10.0.17763.6293

microsoftwindows_10_21h1Range<10.0.19044.4894

microsoftwindows_10_22h2Range<10.0.19041.4894arm64

microsoftwindows_10_22h2Range<10.0.19045.4894x64

microsoftwindows_10_22h2Range≤10.0.19045.4894x86

microsoftwindows_11_21h2Range<10.0.22000.3197

microsoftwindows_11_22h2Range<10.0.22621.4169

microsoftwindows_11_23h2Range<10.0.22631.4169

microsoftwindows_11_24h2Range<10.0.26100.1742

microsoftwindows_server_2016Range<10.0.14393.7336

microsoftwindows_server_2019Range<10.0.17763.6293

microsoftwindows_server_2022Range<10.0.20348.2700

microsoftwindows_server_2022_23h2Range<10.0.25398.1128

VendorProductVersionCPE
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10_1507	*	cpe:2.3:o:microsoft:windows_10_1507:::::::x64:*
microsoft	windows_10_1507	*	cpe:2.3:o:microsoft:windows_10_1507:::::::x86:*
microsoft	windows_10_1607	*	cpe:2.3:o:microsoft:windows_10_1607:::::::x64:*
microsoft	windows_10_1607	*	cpe:2.3:o:microsoft:windows_10_1607:::::::x86:*
microsoft	windows_10_1809	*	cpe:2.3:o:microsoft:windows_10_1809::::::::
microsoft	windows_10_21h1	*	cpe:2.3:o:microsoft:windows_10_21h1::::::::
microsoft	windows_10_22h2	*	cpe:2.3:o:microsoft:windows_10_22h2:::::::arm64:*
microsoft	windows_10_22h2	*	cpe:2.3:o:microsoft:windows_10_22h2:::::::x64:*
microsoft	windows_10_22h2	*	cpe:2.3:o:microsoft:windows_10_22h2:::::::x86:*
microsoft	windows_11_21h2	*	cpe:2.3:o:microsoft:windows_11_21h2::::::::