CVE-2024-6426

Summary

CVE-2024-6426 is an information exposure vulnerability affecting MESbook 20221021.03. This vulnerability enables a local attacker, who already holds user privileges, to manipulate the API value of the application and gain unauthorized access to various resources within the system. Successful exploitation could lead to significant data leakage or unintended functionality. Users are strongly advised to update their MESbook installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.