CVE-2024-6400 HIGH

CVE-2024-6400: Cleartext Storage of Username and Password in Finrota's Netahsilat

Weakness CWE-312 · Cleartext storage
Published October 4, 2024
Last update June 3, 2026
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N

What the vulnerability does

01Description

Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resource Locations. This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.

Key dates

02Disclosure timeline

October 4, 2024 CVE published
June 3, 2026 Record updated