Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Published: 2024-06-14
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References

No reference.

History

Wed, 14 Aug 2024 02:30:00 +0000

Type Values Removed Values Added
Title Soar Cloud HR Portal - Cleartext Transmission of Sensitive Information
Weaknesses CWE-319
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Wed, 14 Aug 2024 02:00:00 +0000

Type Values Removed Values Added
Description The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. These emails are sent without using an encrypted transmission protocol. If an attacker intercepts the packets, they can obtain the plaintext session information and use it to log into the system. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Subscriptions

No data.

cve-icon MITRE

Status: REJECTED

Assigner: twcert

Published:

Updated: 2024-08-14T01:39:58.883Z

Reserved: 2024-06-14T06:53:32.217Z

Link: CVE-2024-5996

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Rejected

Published: 2024-06-14T09:15:11.010

Modified: 2024-08-14T02:15:04.567

Link: CVE-2024-5996

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.