CVE-2024-38888

Horizon Business Services Inc. Caterease (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) is vulnerable to a Password Brute Forcing attack. The root cause is the software's failure to properly restrict excessive authentication attempts , which allows a local attacker to systematicall...

CVE-2024-38884

Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later) are vulnerable to an Authentication Bypass attack. The root cause is the improper implementation of security checks for standard authentication mechanisms. A local attacker can exploit this vuln...

CVE-2024-38881

Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later) are vulnerable to a Rainbow Table Password cracking attack . The root cause is the use of one-way hashes without salts when storing user passwords, which facilitates easier hash cracking and pas...

CVE-2024-38883

Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later) are vulnerable to a Drop Encryption Level attack. The root cause is the selection of a less-secure algorithm during the negotiation process, which allows a remote attacker to perform the attack....

CVE-2024-38882

The Horizon Business Services Inc. Caterease software (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) is vulnerable to remote command line execution . The root cause is an SQL Injection vulnerability resulting from the improper neutralization of special elements used in an OS comman...

CVE-2024-38887

CVE-2024-38887 affects Horizon Business Services Inc. Caterease versions 16.0.1.1663–24.0.1.2405. The issue allows a remote attacker to expand control over the operating system from the database by executing commands with unnecessary privileges. Impact is described as total compromise in the sour...

CVE-2024-38889

Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later) are affected by CVE-2024-38889 due to improper neutralization of SQL elements, enabling remote SQL Injection. The issue is documented across multiple sources (NVD/Red Hat/CVE lists and PT Securi...

CVE-2024-38886

The CVE-2024-38886 entry concerns Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later versions). A remote attacker can perform a Traffic Injection attack due to improper verification of the source of a communication channel. The NVD/CNA records ra...

CVE-2024-38891

An issue in Horizon Business Services Inc. Caterease (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) allows a remote attacker to perform a Sniffing Network Traffic attack. This vulnerability is caused by the cleartext transmission of sensitive information across the network. Practic...

CVE-2024-38885

Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 (and possibly later) are vulnerable to unauthorized access. The root cause is hardcoded SQL user credentials within the client application, which allows a remote attacker to gain access using known operating system ...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) allows a local attacker to perform an Authentication Bypass . This is caused by insufficient protection against capture-replay attacks . While no specific patch version is c...