This vulnerability in Shahjada Download Manager allows an attacker with some privileges to remotely retrieve embedded sensitive system information without user interaction. It affects versions up to and including 3.3.32. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, and limited confidentiality impact. No official patch or vendor advisory details are provided, and no known exploits have been reported.

The vulnerability exposes sensitive system information to unauthorized parties, potentially aiding further attacks or information gathering. The impact is limited to confidentiality with no direct impact on system integrity or availability. Exploitation requires some level of privileges, reducing the overall risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access privileges to trusted users and monitor for suspicious activity related to the Download Manager. Avoid exposing the affected versions to untrusted networks where possible.