PT-2025-22399 · Itech · Itech Ilabclient

Published 2025-05-21 · Updated 2025-12-27 · CVE-2024-56428

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions itech iLabClient version 3.7.1

Description The issue allows local attackers to read cleartext credentials for servers configured in the client from the local iLabClient database, specifically from the CONFIGS table.

Recommendations For itech iLabClient version 3.7.1, consider restricting access to the CONFIGS table in the local iLabClient database to minimize the risk of exploitation. As a temporary workaround, restrict local access to the iLabClient database until a patch is available.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2024-56428

Affected Products

Itech Ilabclient

References · 6

• 🔥 https://github.com/lisa-2905/CVE-2024-56428 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-56428 · Security Note
• https://osv.dev/vulnerability/CVE-2024-56428 · Vendor Advisory
• https://t.me/cvenotify/126631 · Telegram Post
• https://twitter.com/CVEnew/status/2005031819591270549 · Twitter Post
• https://itech-gmbh.de/#ueber-itech · Note