CVE-2024-42027

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Weakness enumeration

CWE-1391

Affected software

No affected versions have been published.

Timeline

Published
Oct 7, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-420288.8A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and eaCVE-2024-420296.3xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single CVE-2024-42035.4The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions uCVE-2024-420306.2Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may CVE-2024-420317.5Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect servicCVE-2024-420325.5Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect serviceCVE-2024-420337.1Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity CVE-2024-420345.5LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2024-420357.8Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality CVE-2024-420367.5Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-420376.2Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confideCVE-2024-420387.8Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service
CVE-2024-42027: Medium severity, CVSS 6.7 | Vulnix