Paper/Archive/CVE-2024-6118

CVE-2024-6118

Hamastar Technology MeetingHub Paperless Meetings — Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password

EPSS 0.5%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 41.7.417 × 208.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

Affected

ProductAffectedFixed inSource

MeetingHub Paperless Meetings2021–CNA

meetinghub_paperless_meetings2021–CISA-ADP

Scores by source

ZUSO ART (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

writeupzuso.ai/advisory/za-2024-03