2024-05-27 23:58:24 +00:00
{
"id" : "CVE-2024-36426" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-05-27T22:15:08.507" ,
2025-01-14 19:03:56 +00:00
"lastModified" : "2025-01-14T17:15:16.953" ,
2024-05-28 14:03:31 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-07-03 04:04:51 +00:00
"cveTags" : [ ] ,
2024-05-27 23:58:24 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session."
2024-05-28 14:03:31 +00:00
} ,
{
"lang" : "es" ,
"value" : "En TARGIT Decision Suite 23.2.15007.0 anterior al oto\u00f1o de 2023, el token de sesi\u00f3n es parte de la URL y puede enviarse en una sesi\u00f3n HTTP de texto sin cifrar."
2024-05-27 23:58:24 +00:00
}
] ,
2025-01-14 19:03:56 +00:00
"metrics" : { } ,
2024-05-27 23:58:24 +00:00
"references" : [
{
"url" : "https://community.targit.com/hc/en-us/articles/12618082416028-Change-Log-On-prem" ,
"source" : "cve@mitre.org"
} ,
2024-09-27 16:03:18 +00:00
{
"url" : "https://community.targit.com/hc/en-us/articles/16112758176156-Vulnerabilities" ,
"source" : "cve@mitre.org"
} ,
2024-05-27 23:58:24 +00:00
{
"url" : "https://github.com/DMCERTCE/DecisionSuite_Token_in_Url" ,
"source" : "cve@mitre.org"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://community.targit.com/hc/en-us/articles/12618082416028-Change-Log-On-prem" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://github.com/DMCERTCE/DecisionSuite_Token_in_Url" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2024-05-27 23:58:24 +00:00
}
]
}