CVE-2024-22892
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-22892: OpenSlides 4.0.15 software was found to have a critical vulnerability, where it employs a weak hashing algorithm to securely store user passwords. This issue poses a significant risk as weakened hashes can be easily cracked using common password-cracking tools. Attackers may gain unauthorized access to the system by exploiting this vulnerability, potentially leading to data breaches or other malicious activities. Users are strongly advised to update their OpenSlides software to a patch release that addresses this issue promptly to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Openslides