CVE-2024-42338

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Aug 25, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-423394.3CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-42345.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayful Islam Filterable Portfolio alloCVE-2024-423404.3CyberArk - CWE-602: Client-Side Enforcement of Server-Side SecurityCVE-2024-423416.1Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')CVE-2024-423424.3Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CVE-2024-423437.5Loway - CWE-204: Observable Response DiscrepancyCVE-2024-423445.5A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application inserts sensitive inCVE-2024-423454.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application does not properly haCVE-2024-423465.4Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructCVE-2024-423476.5matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a usCVE-2024-423488.6FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registeringCVE-2024-423495.3FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorized and rejected login
CVE-2024-42338: Medium severity, CVSS 4.3 | Vulnix