CVE-2024-45785 Information disclosure in MUSASI
An attacker can retrieve other users' credentials and sensitive information due to improper client-side authentication in MUSASI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-45785?
CVE-2024-45785 is a high-severity vulnerability in NEUMANN CO.LTD. MUSASI, published on 25 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MUSASI version 3 contains an issue with use of client-side authentication. If this vulnerability is exploited, other users' credential and sensitive information may be retrieved.
Weakness: CWE-603
Which versions are affected by CVE-2024-45785?
It affects 1 product.
Products include Neumann Musasi.
How do I fix CVE-2024-45785?
No fix has been published for CVE-2024-45785 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-45785 being exploited?
There is no known exploitation of CVE-2024-45785 in the wild and no public exploit code.
Sources
Also known as GHSA-pcrm-w585-fvg9.