CVE-2024-55198

Summary

CVE-2024-55198 is a newly disclosed vulnerability affecting the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality. This issue enables a remote attacker to perform user enumeration by analyzing discrepancies in error messages during the password recovery process. The vulnerability can potentially expose a list of valid usernames to an attacker, increasing the risk of unauthorized access to the system. This security flaw underscores the importance of implementing proper access control mechanisms and secure error handling practices in software applications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.