CVE-2024-25102
Last modified
CVE-2024-25102 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user login component. An attacker with local administrative privileges could exploit this to obtain the password of AppSamvid on the targeted system. Successful exploitation of this vulnerability could allow the attacker to take complete control of the application on the targeted system.. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user login component. An attacker with local administrative privileges could exploit this to obtain the password of AppSamvid on the targeted system. Successful exploitation of this vulnerability could allow the attacker to take complete control of the application on the targeted system.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-25102?
How severe is CVE-2024-25102?
How do I fix CVE-2024-25102?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-25096Improper Control of Generation of Code ('Code Injection') vu…9.8
- CVE-2024-25097Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-25098Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-25099Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-25100Deserialization of Untrusted Data vulnerability in WP Swings…9.8
- CVE-2024-25101Improper Neutralization of Input During Web Page Generation …4.8
- CVE-2024-25103This vulnerability exists in AppSamvid software due to the u…6.3
- CVE-2024-25106OpenObserve is a observability platform built specifically f…6.5
- CVE-2024-25107WikiDiscover is an extension designed for use with a CreateW…6.1
- CVE-2024-25108Pixelfed is an open source photo sharing platform. When proc…8.8
- CVE-2024-25109ManageWiki is a MediaWiki extension allowing users to manage…5.4
- CVE-2024-2511Issue summary: Some non-default TLS server configurations ca…5.9
Are you affected by CVE-2024-25102?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST