-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
CVE Vulnerability Details :
CVE-2024-33849
PUBLISHED
More Info
Official Page
Assigner
-
mitre
Assigner Org ID
-
8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At
-
28 May, 2024 | 15:22
Updated At
-
13 Feb, 2025 | 15:52
Rejected At
-
▼
CVE Numbering Authority (CNA)
ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
n/a
Problem Types
Type
CWE ID
Description
text
N/A
n/a
Type:
text
CWE ID:
N/A
Description:
n/a
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
https://www.ci-solution.com/produkte/ps-out-of-office.html
N/A
https://www.syss.de/pentest-blog/rechteausweitung-durch-unsichere-standardkonfiguration-im-ci-out-of-office-manager-syss-2024-013
N/A
Hyperlink:
https://www.ci-solution.com/produkte/ps-out-of-office.html
Resource:
N/A
Hyperlink:
https://www.syss.de/pentest-blog/rechteausweitung-durch-unsichere-standardkonfiguration-im-ci-out-of-office-manager-syss-2024-013
Resource:
N/A
▼
Authorized Data Publishers (ADP)
1.
CISA ADP Vulnrichment
Affected Products
Vendor
cisolutions
Product
ci_out_of_office_manager
CPEs
cpe:2.3:a:cisolutions:ci_out_of_office_manager:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
From
0
through
6.0.0.77
(custom)
Problem Types
Type
CWE ID
Description
CWE
CWE-321
CWE-321 Use of Hard-coded Cryptographic Key
CWE
CWE-1391
CWE-1391 Use of Weak Credentials
CWE
CWE-522
CWE-522 Insufficiently Protected Credentials
CWE
CWE-657
CWE-657 Violation of Secure Design Principles
Type:
CWE
CWE ID:
CWE-321
Description:
CWE-321 Use of Hard-coded Cryptographic Key
Type:
CWE
CWE ID:
CWE-1391
Description:
CWE-1391 Use of Weak Credentials
Type:
CWE
CWE ID:
CWE-522
Description:
CWE-522 Insufficiently Protected Credentials
Type:
CWE
CWE ID:
CWE-657
Description:
CWE-657 Violation of Secure Design Principles
Metrics
Version
Base score
Base severity
Vector
3.1
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Version:
3.1
Base score:
6.5
Base severity:
MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
2.
CVE Program Container
Affected Products
Metrics
Version
Base score
Base severity
Vector
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
Event
Date
Replaced By
Rejected Reason
References
Hyperlink
Resource
https://www.ci-solution.com/produkte/ps-out-of-office.html
x_transferred
https://www.syss.de/pentest-blog/rechteausweitung-durch-unsichere-standardkonfiguration-im-ci-out-of-office-manager-syss-2024-013
x_transferred
Hyperlink:
https://www.ci-solution.com/produkte/ps-out-of-office.html
Resource:
x_transferred
Hyperlink:
https://www.syss.de/pentest-blog/rechteausweitung-durch-unsichere-standardkonfiguration-im-ci-out-of-office-manager-syss-2024-013
Resource:
x_transferred
Details not found