Lucene search

TR-CERTCVE-2024-3305

HistorySep 12, 2024 - 1:15 p.m.

CVE-2024-3305

2024-09-1213:15:12

CWE-200

TR-CERT

web.nvd.nist.gov

vulnerability

sensitive information

unauthorized actor

utarit information

soliclub

retrieve data

ios

android

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:L/VI:L/SI:L/VA:N/SA:L

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

37.7%

JSON

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

Affected configurations

Nvd

Node

utaritsoliclubRange<4.4.0iphone_os

utaritsoliclubRange<5.2.1android

VendorProductVersionCPE
utaritsoliclub*cpe:2.3:a:utarit:soliclub:*:*:*:*:*:iphone_os:*:*
utaritsoliclub*cpe:2.3:a:utarit:soliclub:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
utarit	soliclub	*	cpe:2.3:a:utarit:soliclub::::::iphone_os::*
utarit	soliclub	*	cpe:2.3:a:utarit:soliclub::::::android::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SoliClub",
    "vendor": "Utarit Information",
    "versions": [
      {
        "lessThan": "4.4.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-24-1457

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:L/VI:L/SI:L/VA:N/SA:L

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

37.7%

JSON

Related for CVE-2024-3305