CVE-2024-2639

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-2639", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2024-03-19T09:40:54.274Z", "datePublished": "2024-03-19T15:00:06.206Z", "dateUpdated": "2024-08-12T16:40:54.734Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2024-03-19T15:00:06.206Z"}, "title": "Bdtask Wholesale Inventory Management System session fixiation", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-384", "lang": "en", "description": "CWE-384 Session Fixiation"}]}], "affected": [{"vendor": "Bdtask", "product": "Wholesale Inventory Management System", "versions": [{"version": "20240311", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Bdtask Wholesale Inventory Management System up to 20240311. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "de", "value": "In Bdtask Wholesale Inventory Management System bis 20240311 wurde eine problematische Schwachstelle ausgemacht. Es geht um eine nicht n\u00e4her bekannte Funktion. Durch Beeinflussen mit unbekannten Daten kann eine session fixiation-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N"}}], "timeline": [{"time": "2024-03-19T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2024-03-19T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2024-03-19T10:46:10.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "srivishnu (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.257245", "name": "VDB-257245 | Bdtask Wholesale Inventory Management System session fixiation", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/?ctiid.257245", "name": "VDB-257245 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://drive.google.com/file/d/1bNnSNssAeQFkO0FdW_yaEvDg5XExMPaf/view?usp=drivesdk", "tags": ["exploit"]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:18:47.863Z"}, "title": "CVE Program Container", "references": [{"url": "https://vuldb.com/?id.257245", "name": "VDB-257245 | Bdtask Wholesale Inventory Management System session fixiation", "tags": ["vdb-entry", "x_transferred"]}, {"url": "https://vuldb.com/?ctiid.257245", "name": "VDB-257245 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required", "x_transferred"]}, {"url": "https://drive.google.com/file/d/1bNnSNssAeQFkO0FdW_yaEvDg5XExMPaf/view?usp=drivesdk", "tags": ["exploit", "x_transferred"]}]}, {"affected": [{"vendor": "bdtask", "product": "multi_store_inventory_management_system", "cpes": ["cpe:2.3:a:bdtask:multi_store_inventory_management_system:1.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.0", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-28T18:59:04.098804Z", "id": "CVE-2024-2639", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-12T16:40:54.734Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://vuldb.com/?id.257245", "name": "VDB-257245 | Bdtask Wholesale Inventory Management System session fixiation", "tags": ["vdb-entry", "x_transferred"]}, {"url": "https://vuldb.com/?ctiid.257245", "name": "VDB-257245 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required", "x_transferred"]}, {"url": "https://drive.google.com/file/d/1bNnSNssAeQFkO0FdW_yaEvDg5XExMPaf/view?usp=drivesdk", "tags": ["exploit", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:18:47.863Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-2639", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-03-28T18:59:04.098804Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:bdtask:multi_store_inventory_management_system:1.0:*:*:*:*:*:*:*"], "vendor": "bdtask", "product": "multi_store_inventory_management_system", "versions": [{"status": "affected", "version": "1.0"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-12T16:40:31.760Z"}}], "cna": {"title": "Bdtask Wholesale Inventory Management System session fixiation", "credits": [{"lang": "en", "type": "reporter", "value": "srivishnu (VulDB User)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N"}}], "affected": [{"vendor": "Bdtask", "product": "Wholesale Inventory Management System", "versions": [{"status": "affected", "version": "20240311"}]}], "timeline": [{"lang": "en", "time": "2024-03-19T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2024-03-19T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2024-03-19T10:46:10.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.257245", "name": "VDB-257245 | Bdtask Wholesale Inventory Management System session fixiation", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/?ctiid.257245", "name": "VDB-257245 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://drive.google.com/file/d/1bNnSNssAeQFkO0FdW_yaEvDg5XExMPaf/view?usp=drivesdk", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Bdtask Wholesale Inventory Management System up to 20240311. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "de", "value": "In Bdtask Wholesale Inventory Management System bis 20240311 wurde eine problematische Schwachstelle ausgemacht. Es geht um eine nicht n\u00e4her bekannte Funktion. Durch Beeinflussen mit unbekannten Daten kann eine session fixiation-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-384", "description": "CWE-384 Session Fixiation"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2024-03-19T15:00:06.206Z"}}}, "cveMetadata": {"cveId": "CVE-2024-2639", "state": "PUBLISHED", "dateUpdated": "2024-08-12T16:40:54.734Z", "dateReserved": "2024-03-19T09:40:54.274Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2024-03-19T15:00:06.206Z", "assignerShortName": "VulDB"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "Wholesale Inventory Management System", "vendor": "Bdtask", "versions": [{"status": "affected", "version": "20240311"}]}], "source": "cna@vuldb.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:bdtask:multi_store_inventory_management_system:1.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "multi_store_inventory_management_system", "vendor": "bdtask", "versions": [{"status": "affected", "version": "1.0"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Bdtask Wholesale Inventory Management System up to 20240311. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad fue encontrada en Bdtask Wholesale Inventory Management System hasta 20240311 y ha sido declarada problem\u00e1tica. Una funcionalidad desconocida es afectada por esta vulnerabilidad. La manipulaci\u00f3n conduce a la fijaci\u00f3n de la sesi\u00f3n. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al p\u00fablico y puede utilizarse. A esta vulnerabilidad se le asign\u00f3 el identificador VDB-257245. NOTA: Se contact\u00f3 primeramente con el proveedor sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2024-2639", "lastModified": "2026-06-17T07:24:56.753", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-2639", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-03-28T18:59:04.098804Z", "version": "2.0.3"}}]}, "published": "2024-03-19T15:15:11.577", "references": [{"source": "cna@vuldb.com", "url": "https://drive.google.com/file/d/1bNnSNssAeQFkO0FdW_yaEvDg5XExMPaf/view?usp=drivesdk"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.257245"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.257245"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://drive.google.com/file/d/1bNnSNssAeQFkO0FdW_yaEvDg5XExMPaf/view?usp=drivesdk"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://vuldb.com/?ctiid.257245"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://vuldb.com/?id.257245"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-384"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{}