CVE-2024-8609 describes a vulnerability in Oceanic Software's ValeApp before version 2.0.0 where sensitive information is improperly inserted into log files. This CWE-532 issue can lead to unauthorized access to sensitive data through log queries. The CVSS 4.0 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality. No official fix or patch has been documented, and no known exploits have been reported.

The vulnerability allows sensitive information to be exposed via log files, potentially leading to unauthorized disclosure of confidential data. Given the high CVSS score, this could significantly impact confidentiality if exploited. However, no active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to log files and monitor for any unusual access patterns to mitigate potential exposure.