VULNERABILITY INTELLIGENCE

CVE-2024-6118

CVSS score9.1 CRITICAL
EPSS probability0.48%
CISA KEVNot currently listed
Published2024-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

Weakness classification

  • ART@zuso.ai: CWE-256
  • nvd@nist.gov: CWE-522

Primary references