CVE-2024-6426
Information exposure vulnerability vulnerability in MESbook
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Information exposure vulnerability vulnerability in MESbook
| Assigner | INCIBE |
| Reserved | 2024-07-01 |
| Published | 2024-07-03 |
| Updated | 2024-08-01 |
Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.
| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
David Utón Amaya (m3n0sd0n4ld)
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-mesbook
