External Control of File Name or Path

CVE-2024-43451

Medium

6.5/10

Summary

NTLM Hash Disclosure Spoofing Vulnerability

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: NONE

CWE-73 - External Control of File Name or Path

The software allows user input to control or influence paths or file names that are used in filesystem operations.

References

Advisory Timeline

Published Nov 12, 2024