CVE-2024-10122 - Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking

Back Back to CVE browser

MEDIUM

Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking

Published Oct 18, 2024

5.1

MEDIUM

CVSS 4.0

EPSS 0.49%

Description

A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field masking. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Topdata Product Inner Rep Plus WebServer Default
n/a
- Version
  2.01
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Topdata

Inner Rep Plus WebServer

n/a

Version	Status	Constraints
2.01	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-549

References (3)

https://vuldb.com/?ctiid.280914
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.280914
vdb-entryThird Party Advisory
https://vuldb.com/?submit.421292
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://vuldb.com/?ctiid.280914		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.280914		vdb-entryThird Party Advisory
https://vuldb.com/?submit.421292		third-party-advisoryThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Oct 18, 2024

Updated Oct 18, 2024

Reserved Oct 18, 2024

Link CVE-2024-10122

CISA Vulnrichment

Updated Oct 18, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-10122

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-10122