CVE-2024-9040
A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation leads to cleartext storage in a file or on disk. An attack has to be approached locally.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.6
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.15%
- CWE
- CWE-313
- Published
- 2024-09-20
- Last modified
- 2026-03-13
Affected products
- code-projects Blood Bank Management System
Weakness type
Related vulnerabilities
- CVE-2026-14663 — PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
- CVE-2026-8804 — Cleartext Storage of Sensitive Information for Puppet Resource API
- CVE-2026-52783 — OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure
- CVE-2026-24349 — A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC...
- CVE-2025-4397 — Medtronic MyCareLink Patient Monitor Data Encryption Weakness
- CVE-2026-6796 — Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file
- CVE-2026-6598 — langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
- CVE-2026-5531 — SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file