CVE-2024-9334

Summary

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass.

This issue affects Pallium Vehicle Tracking: before 17.10.2024.

Affected Software

Weaknesses

• CWE-798: CWE-798 Use of Hard-coded Credentials
• CWE-921: CWE-921 Storage of Sensitive Data in a Mechanism without Access Control

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.usom.gov.tr/bildirim/tr-25-0044
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0044

• ←Previous
• Next→