CVE-2024-24915
MEDIUMDescription
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
Is your site exposed to CVE-2024-24915?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| checkpoint | smartconsole |
| microsoft | windows |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-24915? +
How severe is CVE-2024-24915? +
What products are affected by CVE-2024-24915? +
How do I check if I'm vulnerable to CVE-2024-24915? +
Related Vulnerabilities
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive …
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in …
An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's …
Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere.
Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.
In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machine) …