CVE-2024-36823 - Vulnerability Details - OpenCVE

The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ninjaframework	Ninja

Configuration 1 [-]

cpe:2.3:a:ninjaframework:ninja:7.0.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/ninjaframework/ninja/issues

History

Tue, 25 Mar 2025 19:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-327

Fri, 14 Feb 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-06-06T21:14:31.574Z

Updated: 2025-03-25T18:15:09.843Z

Reserved: 2024-05-30T00:00:00.000Z

Link: CVE-2024-36823

Vulnrichment

Updated: 2024-08-02T03:43:49.083Z

NVD

Status : Modified

Published: 2024-06-06T22:15:10.853

Modified: 2025-03-25T19:15:43.420

Link: CVE-2024-36823

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ninjaframework:ninja:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A8DD1766-3613-48D2-AC47-2D0E8899C938", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information."}, {"lang": "es", "value": "Se descubri\u00f3 que la funci\u00f3n encrypt() de Ninja Core v7.0.0 utiliza un algoritmo criptogr\u00e1fico d\u00e9bil, lo que provoca una posible fuga de informaci\u00f3n confidencial."}], "id": "CVE-2024-36823", "lastModified": "2025-03-25T19:15:43.420", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-06-06T22:15:10.853", "references": [{"source": "cve@mitre.org", "tags": ["Issue Tracking"], "url": "https://github.com/ninjaframework/ninja/issues"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://github.com/ninjaframework/ninja/issues"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-326"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-327"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}