CVE-2024-44097
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 2, 2024
Updated: Oct 4, 2024
CWE ID 269
Summary
CVE-2024-44097 is a vulnerability affecting TLS connections. According to recent research, the application fails to properly validate server certificates during the initialization process. This weakness enables network attackers to intercept the connection and read sensitive data. They could potentially send the client a fraudulent response or relay modified data to the actual server. Consequently, unsecured data transmission may occur, leading to potential data breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.