PT-2024-37618 · Mesbook · Mesbook

David Utón Amaya · Published 2024-07-03 · Updated 2024-07-07 · CVE-2024-6426

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions MESbook version 20221021.03

Description The issue is an information exposure vulnerability that could allow a local attacker with user privileges to access different resources by changing the API value of the application.

Recommendations For MESbook version 20221021.03, consider restricting access to the API to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-6426

Affected Products

Mesbook

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-6426 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6426 · Vendor Advisory
• https://t.me/cvenotify/85101 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-mesbook · Note
• https://twitter.com/VulmonFeeds/status/1808511044605644919 · Twitter Post
• https://twitter.com/CVEnew/status/1808477446510870713 · Twitter Post
• https://twitter.com/cracbot/status/1810192153597157821 · Twitter Post