7.2

CVE-2024-24915

SmartConsole Sensitive Credential Exposure via Memory Dump

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild400
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild402
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild404
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild406
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild407
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild409
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild410
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild412
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild413
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild414
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild416
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild417
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild418
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild420
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild423
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild424
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild425
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild426
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild427
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild428
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild429
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild640
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild641
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild645
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild646
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild649
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild651
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild653
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild654
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild655
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild656
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild658
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild659
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild660
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild661
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild663
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr82 Updatebuild1051
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr82 Updatebuild1053
   Microsoft ≫ Windows Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.343
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
cve@checkpoint.com 6.1 0.2 5.9
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

CWE-316 Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.