CVE-2024-29146

Summary

CVE-2024-29146 is a newly disclosed cybersecurity vulnerability that allows unauthorized access to decrypted user passwords stored in memory. Before any user logs in, these passwords are decrypted and kept in memory. An attacker can exploit this vulnerability by retrieving the coredump file, gaining access to these decrypted passwords. Affected products and their specifications have been identified by the vendors listed in the references.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.