Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
History

Mon, 30 Jun 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Sun, 29 Jun 2025 12:15:00 +0000

Type Values Removed Values Added
Description Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
Title SmartConsole Sensitive Credential Exposure via Memory Dump
Weaknesses CWE-316
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: checkpoint

Published: 2025-06-29T12:02:41.126Z

Updated: 2025-06-30T13:32:15.417Z

Reserved: 2024-02-01T15:19:26.278Z

Link: CVE-2024-24915

cve-icon Vulnrichment

Updated: 2025-06-30T13:14:17.469Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-06-29T12:15:22.803

Modified: 2025-06-30T18:38:23.493

Link: CVE-2024-24915

cve-icon Redhat

No data.