CVE-2024-36070
May 19, 2024, 7:15 p.m.
None
No Score
Description
tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. (An update is also available for the 2022.11 series.)
Product(s) Impacted
| Product | Versions |
|---|---|
| Tine |
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
Tags
Timeline
Published: May 19, 2024, 7:15 p.m.
Last Modified: May 19, 2024, 7:15 p.m.
Last Modified: May 19, 2024, 7:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.