CVE-2024-56428

Published: May 21, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for their servers configured in the client.

Affected (1)

Products: Itech Gmbh: Ilabclient

Itech Gmbh

1 product

Ilabclient

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Itech Gmbh Ilabclient	Version 3.7.1

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://github.com/lisa-2905/CVE-2024-56428

Source: cve@mitre.org

ExploitThird Party Advisory

https://itech-gmbh.de/#ueber-itech

Source: cve@mitre.org

Product

Timeline

No history available yet.