CVE-2024-38891

HIGH

Horizoncloud Caterease < 24.0.1.2405 - Cleartext Transmission

Title source: rule

Description

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Sniffing Network Traffic attack due to the cleartext transmission of sensitive information.

References (4)

[Product] http://caterease.com

[Product] http://horizon.com

[Third Party Advisory] https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html

[VDB Entry] https://vuldb.com/?id.273375

Scores

CVSS v3 7.5

EPSS 0.0010

EPSS Percentile 27.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-319

Status published

Products (1)

horizoncloud/caterease 16.0.1.1663 - 24.0.1.2405

Published Aug 02, 2024

Tracked Since Feb 18, 2026