CVE-2024-2462

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Allow attackers to intercept or falsify data exchanges between the client and the server

Metrics

CVSS 4.0 6.8/10CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-297

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-246219.8Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers canCVE-2024-246228.8Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulneCVE-2024-246238.8Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can explCVE-2024-24638.0Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions thCVE-2024-24646.3This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,CVE-2024-24657.1Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafted URL.This issue affCVE-2024-24666.5libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcuCVE-2024-24675.9A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a netwoCVE-2024-24685.4The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plCVE-2024-246807.5An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subjecCVE-2024-246819.8An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA version before 1.2).CVE-2024-246836.5Improper Input Validation vulnerability in Apache Hop Engine.This issue affects Apache Hop Engine: before 2.8.0. Users are recommended to u
CVE-2024-2462: Medium severity, CVSS 6.8 | Vulnix