CVE-2024-6880
Jan. 10, 2025, 6:15 p.m.
Tags
Product(s) Impacted
MegaBIP
- below 5.15
Description
During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms. Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt further attacks. This issue affects MegaBIP software versions below 5.15
Weaknesses
CWE-538
Insertion of Sensitive Information into Externally-Accessible File or Directory
The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
CWE ID: 538Date
Published: Jan. 10, 2025, 6:15 p.m.
Last Modified: Jan. 10, 2025, 6:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cvd@cert.pl