CVE-2024-32151

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-257

Affected software

No affected versions have been published.

Timeline

Published
Nov 26, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-321524.3A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can leadCVE-2024-32165.3The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized modificatCVE-2024-321619.8jizhiCMS 2.5 suffers from a File upload vulnerability.CVE-2024-321624.3CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.CVE-2024-321636.4CMSeasy 7.7.7.9 is vulnerable to code execution.CVE-2024-321668.8Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now anCVE-2024-321679.1Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the fCVE-2024-32178.8The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versCVE-2024-32185.4A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects anCVE-2024-32195.1The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such asCVE-2024-32202.3There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable CVE-2024-322064.6A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute a