CVE-2024-22432

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configured MySQL Database user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application Database with privileges of the compromised account.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-256CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Jan 25, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-224339.8Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in CVE-2024-224358.3A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow CVE-2024-224366.5A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a denial of service.CVE-2024-224377.3A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vuCVE-2024-224383.5A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability CVE-2024-224396.9A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploiCVE-2024-22445.3REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successfuCVE-2024-224406.8A potential security vulnerability has been identified in HPE Compute Scale-up Server 3200 server. This vulnerability could cause disclosureCVE-2024-224419.8HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.CVE-2024-224429.8The vulnerability could be remotely exploited to bypass authentication.CVE-2024-224438.8A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conCVE-2024-224446.1A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a refl