How severe is CVE-2024-2745?

This vulnerability has a severity rating of LOW with a CVSS score of 3.3 out of 10.

What type of vulnerability is CVE-2024-2745?

This is classified as CWE-598, which is a common weakness in software security.

CVE-2024-2745 - LOW Severity | CVSS 3.3

Vulnerability Description

Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive information such as passwords, auth tokens, usernames etc. The vulnerability is remediated in version 6.6.244.

Related Vulnerabilities

CVE-2025-3637

LOW

CVSS:3.1(Low)

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occur...

CWE-5982025

CVE-2025-0730

MEDIUM

CVSS:3.7(Low)

A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GE...

CWE-5982025

CVE-2025-2356

MEDIUM

CVSS:3.7(Low)

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of ...

CWE-5982025

CVE-2022-34452

LOW

CVSS:2.7(Low)

PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can able to exploit the issue and view sensitive...

CWE-5982022

CVE-2025-3943

MEDIUM

CVSS:4.1(Medium)

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter In...

CWE-5982025

CVE-2025-26058

MEDIUM

CVSS:4.2(Medium)

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens dire...

CWE-5982025