Lucene search
HistoryJul 03, 2024 - 12:15 p.m.
CVE-2024-6426
cve-2024-6426
information exposure
mesbook
local attacker
user privileges
api value
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.1%
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
Affected configurations
Node
mesbookmesbookMatch20221021.03
Related
cvelist
cvelist
CVE-2024-6426 Information exposure vulnerability vulnerability in MESbook
2024-07-03 11:51:58
vulnrichment
vulnrichment
CVE-2024-6426 Information exposure vulnerability vulnerability in MESbook
2024-07-03 11:51:58
cve
cve
CVE-2024-6426
2024-07-03 12:15:03
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.1%
Related for NVD:CVE-2024-6426