Cleartext Storage of Sensitive Information in Memory
CVE-2024-24915
Summary
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
- LOW
- PHYSICAL
- HIGH
- UNCHANGED
- REQUIRED
- HIGH
- HIGH
- HIGH
CWE-316 - Cleartext Storage of Sensitive Information in Memory
The application stores sensitive information in cleartext in memory.
References
Advisory Timeline
- Published
