CVE-2024-38891 is a critical vulnerability affecting Horizon Business Services Inc. Caterease software versions 16.0.1.1663 through 24.0.1.2405. The vulnerability arises from the cleartext transmission of sensitive information over the network, enabling remote attackers to perform sniffing attacks. This weakness corresponds to CWE-319 (Cleartext Transmission of Sensitive Information). The CVSS v3.1 base score is 9.1, reflecting high impact on confidentiality and integrity with no required privileges or user interaction for exploitation. No known exploits are reported in the wild, and no patch or remediation details have been provided.

Successful exploitation allows remote attackers to intercept sensitive information transmitted in cleartext, resulting in complete compromise of confidentiality and integrity of the data. Availability is not impacted. This can expose credentials, personal data, or other sensitive information to unauthorized parties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider mitigating exposure by using network-level protections such as VPNs or encrypted tunnels to protect data in transit. Avoid using vulnerable versions in untrusted networks where sniffing is possible.