CVE-2024-39290 - Vulnerability Details - OpenCVE

Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.

No CVSS v4.0

No CVSS v3.1

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://jvn.jp/en/jp/JVN41397971/
https://www.aiphone.net/important/20241016_1/
https://www.aiphone.net/important/20241016_2/
https://www.aiphone.net/support/software-documents/ix/
https://www.aiphone.net/support/software-documents/ixg/

History

Fri, 22 Nov 2024 12:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 22 Nov 2024 00:45:00 +0000

Type	Values Removed	Values Added
Description		Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book.
Weaknesses		CWE-522
References		https://jvn.jp/en/jp/JVN41397971/ https://www.aiphone.net/important/20241016_1/ https://www.aiphone.net/important/20241016_2/ https://www.aiphone.net/support/software-documents/ix/ https://www.aiphone.net/support/software-documents/ixg/
Metrics		cvssV3_0 `{'score': 6.5, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2024-11-22T00:11:56.742Z

Updated: 2024-11-22T11:34:09.606Z

Reserved: 2024-09-26T01:39:38.784Z

Link: CVE-2024-39290

Vulnrichment

Updated: 2024-11-22T11:29:21.481Z

NVD

Status : Received

Published: 2024-11-22T02:15:20.963

Modified: 2024-11-22T02:15:20.963

Link: CVE-2024-39290

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-39290", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2024-09-26T01:39:38.784Z", "datePublished": "2024-11-22T00:11:56.742Z", "dateUpdated": "2024-11-22T11:34:09.606Z"}, "containers": {"cna": {"affected": [{"vendor": "AIPHONE CO., LTD.", "product": "IX-MV", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HB", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HBT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HWT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW-JP", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-B", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-BT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-W", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-WT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DAU", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DB", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DBT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAU", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DV", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVT", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-P", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-L", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVM", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DU", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-2RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BAU", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BB", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BBT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-FA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2GT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G-N", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BU", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-2RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-B", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-BT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-W", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-WT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXW-MA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SPMIC", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7-L", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HID", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HIDA", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-10K", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-MK", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-GW", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-TGW", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-LC", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book."}], "problemTypes": [{"descriptions": [{"description": "Insufficiently protected credentials", "lang": "en-US", "cweId": "CWE-522", "type": "CWE"}]}], "references": [{"url": "https://www.aiphone.net/important/20241016_1/"}, {"url": "https://www.aiphone.net/important/20241016_2/"}, {"url": "https://www.aiphone.net/support/software-documents/ix/"}, {"url": "https://www.aiphone.net/support/software-documents/ixg/"}, {"url": "https://jvn.jp/en/jp/JVN41397971/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-11-22T00:11:56.742Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-39290", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-22T11:29:20.295390Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-22T11:34:09.606Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-39290", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-22T11:29:20.295390Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-22T11:29:21.481Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "AIPHONE CO., LTD.", "product": "IX-MV", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HB", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HBT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HWT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW-JP", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-B", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-BT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-W", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-WT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DAU", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DB", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DBT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAU", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DV", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVT", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-P", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-L", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVM", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DU", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-2RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BAU", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BB", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BBT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-FA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2GT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G-N", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BU", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-2RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-B", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-BT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-W", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-WT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXW-MA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SPMIC", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7-L", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HID", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HIDA", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-10K", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-MK", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-GW", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-TGW", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-LC", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}], "references": [{"url": "https://www.aiphone.net/important/20241016_1/"}, {"url": "https://www.aiphone.net/important/20241016_2/"}, {"url": "https://www.aiphone.net/support/software-documents/ix/"}, {"url": "https://www.aiphone.net/support/software-documents/ixg/"}, {"url": "https://jvn.jp/en/jp/JVN41397971/"}], "descriptions": [{"lang": "en", "value": "Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticated attacker may obtain sensitive information such as a username and its password in the address book."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-522", "description": "Insufficiently protected credentials"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-11-22T00:11:56.742Z"}}}, "cveMetadata": {"cveId": "CVE-2024-39290", "state": "PUBLISHED", "dateUpdated": "2024-11-22T11:34:09.606Z", "dateReserved": "2024-09-26T01:39:38.784Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2024-11-22T00:11:56.742Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}