CVE-2024-57727
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 15, 2025
Updated: Jan 16, 2025
CWE ID 22
Summary
CVE-2024-57727: SimpleHelp's remote support software, versions 5.5.7 and older, are susceptible to multiple path traversal vulnerabilities. These weaknesses allow unauthenticated attackers to download sensitive files, such as server configuration files containing various secrets and hashed user passwords, by crafting malicious HTTP requests. This poses a serious risk to the confidentiality and integrity of affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.