Skip to main content

Meetinghub Paperless Meetings CVE-2024-6118

CRITICAL
Plaintext Storage of a Password (CWE-256)
2024-08-05 ART@zuso.ai
Information Disclosure Meetinghub Paperless Meetings
9.3
CVSS 4.0 · Vendor: zuso
Share

Severity by source

Vendor (zuso) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (zuso) · only source for this CVE.

CVSS VectorVendor: zuso

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

1
CVE Published
Aug 05, 2024 - 05:15 cve.org
CRITICAL 9.3

DescriptionCVE.org

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

AnalysisAI

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-256. A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file. Affected products include: Hamastar Meetinghub Paperless Meetings.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Meetinghub Paperless Meetings

View all
CVE-2026-1331 CRITICAL
9.8 Jan 22

HAMASTAR MeetingHub has an arbitrary file upload vulnerability allowing unauthenticated remote attackers to upload web s
CVE-2024-6117 CRITICAL
9.3 Aug 05

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Pa
CVE-2026-1330 HIGH
7.5 Jan 22

MeetingHub Paperless Meetings contains an arbitrary file read vulnerability that enables unauthenticated remote attacker
CVE-2026-1332 MEDIUM
5.3 Jan 22

Meetinghub Paperless Meetings is affected by missing authentication for critical function (CVSS 5.3).

Same weakness CWE-256 – Plaintext Storage of a Password

View all
CVE-2024-33375 CRITICAL POC
9.8
CVE-2018-25396 HIGH POC
8.7
CVE-2024-49370 HIGH POC
8.7
CVE-2024-40116 HIGH POC
8.1
CVE-2020-8183 HIGH POC
7.5
CVE-2019-10921 HIGH POC
7.5
CVE-2024-9418 MEDIUM POC
6.5
CVE-2020-37115 MEDIUM POC
6.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-6118 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy