CoreCVE
Back

HIGH

tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php

Published May 19, 2024

Description

tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. (An update is also available for the 2022.11 series.)

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-497

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 19, 2024
Updated Mar 27, 2025
Reserved May 19, 2024
Link CVE-2024-36070
CISA Vulnrichment
Updated Aug 28, 2024
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2024-36070
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-36070