CVE-2024-32151

{"id": "CVE-2024-32151", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2024-11-26T08:15:05.513", "references": [{"url": "https://global.sharp/products/copier/info/info_security_2024-05.html", "source": "vultures@jpcert.or.jp"}, {"url": "https://jp.sharp/business/print/information/info_security_2024-05.html", "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/vu/JVNVU93051062/", "source": "vultures@jpcert.or.jp"}, {"url": "https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.toshibatec.co.jp/information/20240531_02.html", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.toshibatec.com/information/20240531_02.html", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "description": [{"lang": "en", "value": "CWE-257"}]}], "descriptions": [{"lang": "en", "value": "User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}, {"lang": "es", "value": "Las contrase\u00f1as de usuario se descifran y se almacenan en la memoria antes de que cualquier usuario inicie sesi\u00f3n. Las contrase\u00f1as descifradas se pueden recuperar del archivo de volcado de memoria. En cuanto a los detalles de los nombres de los productos afectados, los n\u00fameros de modelo y las versiones, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que se enumeran en [Referencias]."}], "lastModified": "2024-11-26T11:21:59.167", "sourceIdentifier": "vultures@jpcert.or.jp"}