PT-2024-39384 · Unknown · Code-Projects Blood Bank Management System

Published 2024-09-20 · Updated 2024-09-27 · CVE-2024-9040

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0

Description A problematic vulnerability was found in the code-projects Blood Bank Management System, affecting an unknown part of the Password Handler component. This leads to cleartext storage in a file or on disk, resulting in sensitive data exposure. The attack must be approached locally.

Recommendations For code-projects Blood Bank Management System version 1.0, patch immediately and implement secure password hashing to resolve the issue. Additionally, audit for compromised accounts to minimize the risk of exploitation. As a temporary workaround, consider restricting access to the Password Handler component until a patch is available.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-313

CWE-312

Related Identifiers

CVE-2024-9040

Affected Products

Code-Projects Blood Bank Management System

References · 10

• https://osv.dev/vulnerability/CVE-2024-9040 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9040 · Security Note
• https://vuldb.com/?ctiid.278211 · Note
• https://twitter.com/CVEnew/status/1837170941488398629 · Twitter Post
• https://t.me/cvenotify/96363 · Telegram Post
• https://t.me/cvedetector/6114 · Telegram Post
• https://vuldb.com/?id.278211 · Note
• https://twitter.com/oktsec/status/1837078645988331523 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1837203642497011980 · Twitter Post
• https://code-projects.org · Note