Vulnerability · Published Sep 19, 2024 · Assigned by Kaspersky
CVE-2024-8651Netcat CMS: user enumeration
Medium 6.9
In plain English
A medium-severity security flaw in NetCat CMS from NetCat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Official description
A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ https://netcat.ru/] . Versions 6.4.0.24248 and on have the patch.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NetCat | NetCat CMS | 6.4.0.24126.2 |
Weakness: CWE-204 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N