CVE-2024-1343

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Feb 19, 2024
Updated: Feb 20, 2024
CWE ID 284

Summary

CVE-2024-1343 is a vulnerability affecting LaborOfficeFree version 19.10. This issue involves weak permissions in the backup directory, where any authenticated user can access backup files located in the '_programfiles(x86)% LaborOfficeFree BackUp'_ directory. This represents a privacy risk, as sensitive data from the backup files may be readable by unintended users. It is crucial for users to update their software to a patched version to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share