CVE-2024-6400

Description

Cleartext Storage of Sensitive Information vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data.This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.

Reserved 2024-06-28 | Published 2024-10-04 | Updated 2024-10-04 | Assigner TR-CERT

Problem types

CWE-312 Cleartext Storage of Sensitive Information

CWE-311 Missing Encryption of Sensitive Data

CWE-202 Exposure of Sensitive Information Through Data Queries

Product status

Default status
unaffected

1.23.11
unaffected

1.23.08
unaffected

1.23.01
unaffected

1.21.10
unaffected

1.24.03
unaffected

Credits

Kaan ATMACA finder

Secure Future Inc. sponsor

References

www.usom.gov.tr/bildirim/tr-24-1611

cve.org (CVE-2024-6400)

nvd.nist.gov (CVE-2024-6400)

Download JSON