CVE-2024-22432

Summary

CVE-2024-22432 is a vulnerability affecting Networker 19.9 and earlier versions. During MySQL Database backups, a temporary config file containing plain-text passwords is generated. A low-privileged user with access to the Networker Client system could exploit this issue and gain access to the configured MySQL Database user credentials. The attacker may then utilize these exposed credentials to access the vulnerable application Database with the compromised account's privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.