CVE-2024-6118
Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password
- State
- Published
- Severity
- 9.3 Critical
- Published
- Aug 5, 2024
- Updated
- Aug 5, 2024
- Reserved
- Jun 18, 2024
Description
A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N | ZUSO ART |
Weaknesses
- CWE-256 Plaintext Storage of a Password
Affected Products
| Product | Versions |
|---|---|
MeetingHub Paperless MeetingsHamastar Technology |
|
References
- https://zuso.ai/advisory/za-2024-03third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.