CVE Vulnerabilities

CVE-2024-6400

Exposure of Sensitive Information Through Data Queries

Published: Oct 04, 2024 | Modified: Oct 14, 2025
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resource Locations. This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.

Weakness

When trying to keep information confidential, an attacker can often infer some of the information by using statistics.

Affected Software

Name Vendor Start Version End Version
Finrota Finrota * 1.21.10 (excluding)

Potential Mitigations

References