CVE-2024-8264
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Oct 9, 2024
Updated: Oct 17, 2024
CWE ID 532
Summary
CVE-2024-8264 is a vulnerability affecting Fortra's Robot Schedule Enterprise Agent. When detailed logging is activated, the software inadvertently records FTP username and password information in the agent log file. This issue poses a risk as log files are often accessible to unauthorized users, potentially exposing sensitive authentication details. Organizations using the Robot Schedule Enterprise Agent prior to version 3.05 are advised to enable logging with caution, or upgrade to a patched version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Fortra