CVE-2024-36497

CVE-2024-36497: Unhashed Storage of Password

Weakness CWE-312 · Cleartext storage
Published June 24, 2024
Last update February 13, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely.

Key dates

02Disclosure timeline

June 24, 2024 CVE published
February 13, 2025 Record updated