7.2

CVE-2024-24915

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild400
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild402
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild404
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild406
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild407
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild409
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild410
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild412
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild413
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild414
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild416
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild417
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild418
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild420
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild423
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild424
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild425
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild426
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild427
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild428
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild429
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild640
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild641
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild645
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild646
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild649
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild651
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild653
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild654
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild655
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild656
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild658
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild659
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild660
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild661
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild663
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr82 Updatebuild1051
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr82 Updatebuild1053
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.029
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
cve@checkpoint.com 6.1 0.2 5.9
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

CWE-316 Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.