CVE-2024-8643
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Sep 27, 2024
Updated: Oct 4, 2024
CWE ID 384
Summary
CVE-2024-8643 is a newly disclosed session fixation vulnerability that puts Oceanic Software's ValeApp at risk. Affecting versions prior to 2.0.0, this issue enables an attacker to conduct brute force attacks and session hijacking. By manipulating user sessions, a malicious actor can gain unauthorized access to affected systems, potentially leading to data breaches or other serious consequences. Users are urged to update their ValeApp installations as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.