Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-31840

May 21, 2024, 4:53 p.m.

Product(s) Impacted

Italtel Embrace

1.6.4

Description

An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password.

Weaknesses

Date

Published: May 21, 2024, 4:15 p.m.

Last Modified: May 21, 2024, 4:53 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

cve@mitre.org

References

https://www.gruppotim.it/ cve@mitre.org