PT-2024-37596 · Unknown · Finrota Netahsilat

Kaan Atmaca · Published 2024-10-04 · Updated 2025-10-14 · CVE-2024-6400

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Finrota Netahsilat versions prior to 1.24.03

Description The issue concerns a Cleartext Storage of Sensitive Information vulnerability, allowing the retrieval of embedded sensitive data. This vulnerability has been exploited to compromise user information.

Recommendations For Finrota Netahsilat versions prior to 1.24.03, upgrade to version 1.24.03 or later to mitigate the risk of sensitive data exposure.

Fix

Missing Encryption of Sensitive Data

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-311

CWE-312

CWE-202

Related Identifiers

CVE-2024-6400

Affected Products

Finrota Netahsilat

References · 10

• https://osv.dev/vulnerability/CVE-2024-6400 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6400 · Security Note
• https://twitter.com/VulmonFeeds/status/1842233750622511349 · Twitter Post
• https://t.me/cvenotify/97021 · Telegram Post
• https://twitter.com/CVEnew/status/1842164157790998738 · Twitter Post
• https://t.me/cvedetector/6971 · Telegram Post
• https://t.me/latest_high_impact_cve/1248 · Telegram Post
• https://twitter.com/oktsec/status/1842182289414869149 · Twitter Post
• https://t.me/cveNotify/138517 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1611 · Note