CVE-2024-38883

CRITICAL
STIX 2.1 vulnerability

Record summary

CVE-2024-38883 has a selected CVSS score of 9.1 (critical).

Description

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attack due to the selection of a less-secure algorithm during negotiation.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 3, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

caterease

Browse horizoncloud / caterease

Default status: unknown

CVE List16.0.1.1663 to ≤ 24.0.1.2405affected

References

5