CVE-2024-10122
A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field masking. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.1
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.49%
- CWE
- CWE-549
- Published
- 2024-10-18
- Last modified
- 2026-03-13
Affected products
- Topdata Inner Rep Plus WebServer
Weakness type
Related vulnerabilities
- CVE-2026-3314 — Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint
- CVE-2025-13175 — Insecure Password Storage in Y Soft SafeQ 6
- CVE-2025-42904 — Information Disclosure vulnerability in Application Server ABAP
- CVE-2025-64170 — sudo-rs: Partial password reveal is possible after timeout
- CVE-2025-4526 — Dígitro NGC Explorer Configuration missing password field masking
- CVE-2025-0148 — Zoom Jenkins Marketplace plugin - Missing Password Field Masking
- CVE-2023-49106 — Missing Password Field Masking Vulnerability in Hitachi Device Manager
- CVE-2023-2062 — Information Disclosure vulnerability in EtherNet/IP Configuration tools