CVE-2024-36464

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-256

Affected software

No affected versions have been published.

Timeline

Published: Nov 27, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-364658.8A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute CVE-2024-364668.8A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin permissions.CVE-2024-364678.8An authenticated user with API access (e.g.: user with default User role), more specifically a user with access to the user.update API endpo CVE-2024-364688.2The reported vulnerability is a stack buffer overflow in the zbx_snmp_cache_handle_engineid function within the Zabbix server/proxy code. Th CVE-2024-364693.1Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.CVE-2024-36476.4The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's post ticker widget in al CVE-2024-364709.8In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases CVE-2024-364717.5Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL. Project administrators can run CVE-2024-364726.5In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided b CVE-2024-364735.3Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to lo CVE-2024-364747.8An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (CVE-2024-364758.8FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user