CVE-2024-3182
Last modified
CVE-2024-3182 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service (EMS) password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files. . EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service (EMS) password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-3182?
How severe is CVE-2024-3182?
How do I fix CVE-2024-3182?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-31814TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to by…8.8
- CVE-2024-31815In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can ob…9.1
- CVE-2024-31816In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can ob…7.5
- CVE-2024-31817In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can ob…7.5
- CVE-2024-31818Directory Traversal vulnerability in DerbyNet v.9.0 allows a…9.8
- CVE-2024-31819An issue in WWBN AVideo v.12.4 through v.14.2 allows a remot…9.8
- CVE-2024-31820An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54…9.8
- CVE-2024-31821SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstr…8
- CVE-2024-31822An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54…9.8
- CVE-2024-31823An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54…8.8
- CVE-2024-31828Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 …6.1
- CVE-2024-3183A vulnerability was found in FreeIPA in a way when a Kerbero…8.1
Are you affected by CVE-2024-3182?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST