CVE-2024-56428 in iLabClient

Sumário

de MITRE • 21/05/2025

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for their servers configured in the client.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: MITRE
• Reservar: 24/12/2024
• Divulgação: 21/05/2025
• Moderação: aceite
• Entrada: VDB-309912
• CPE: pronto
• CWE: CWE-311 (confirmado)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00134
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-56428
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-56428
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-56428/