CVE-2024-34525: Medium severity FileCodeBox FileCodeBox vulnerability
Published May 5, 2024
·Updated
FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.
Affected Software
2 affected components
FileCodeBox FileCodeBox
Lanol Filecodebox=2.0
Event History
May 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
May 6, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-34525?
CVE-2024-34525 is considered a high severity vulnerability due to the exposure of sensitive credentials.
2
How do I fix CVE-2024-34525?
To fix CVE-2024-34525, update FileCodeBox to the latest version and ensure that environment variables are stored securely.
3
What are the risks associated with CVE-2024-34525?
The risks associated with CVE-2024-34525 include unauthorized access to OneDrive and AWS resources due to plaintext storage of credentials.
4
Which versions of FileCodeBox are affected by CVE-2024-34525?
CVE-2024-34525 affects all versions of FileCodeBox 2.0 that store sensitive information in cleartext.
5
What information is exposed in CVE-2024-34525?
CVE-2024-34525 exposes a OneDrive password and AWS key in a cleartext environment file.