CVE-2024-55198 Information disclosure in n/a
Remote attackers can enumerate valid users by analyzing discrepancies in error messages during password recovery in Celk Saude.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-55198?
CVE-2024-55198 is a medium-severity vulnerability in n/a, published on 13 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses.
Weakness: CWE-204
Which versions are affected by CVE-2024-55198?
It affects 1 product.
Products include Celk Celk Saude.
How do I fix CVE-2024-55198?
No fix has been published for CVE-2024-55198 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-55198 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-55198 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-6rjg-2hv4-xq68.