CVE-2024-27179

Medium

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected…

Toshiba·CWE-1295·Published 2024-06-14

CVSS

4.7

EPSS

0.00

KEV

Exploits

cve.orgen

188 chars

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

NVDen

188 chars

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Las cookies de administración se escriben en texto plano en los registros. Un atacante puede recuperarlos y eludir el mecanismo de autenticación. En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	4.7	1.0	3.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N