What is CVE-2024-2745?

CVE-2024-2745 is a low-severity vulnerability in Rapid7 Insightvm, classified under CWE-598. CVSS score: 3.3/10. Published 2024-04-02.

How severe is CVE-2024-2745?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Rapid7 Insightvm

CVE-2024-2745

Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive information such as passwords, auth tokens, usernames etc. The vulnerability is remediated in version 6.6.244.

EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Rapid7 Insightvm — versions 0

Weakness classification (CWE)

CWE-598

References

cve@rapid7.com (Release Notes)

Frequently asked questions

What is CVE-2024-2745?: CVE-2024-2745 is a low-severity vulnerability in Rapid7 Insightvm, classified under CWE-598. CVSS score: 3.3/10. Published 2024-04-02.
How severe is CVE-2024-2745?: Low severity. CVSS v3 base score is 3.3 out of 10.