Threats Tagged 'cve-2024-58320'

CVE-2024-58320 is an information disclosure vulnerability in Kentico Xperience that allows unauthenticated public users to access sensitive hostname details of the administration interface during authentication. This exposure can reveal internal network configuration information, potentially aiding attackers in further reconnaissance or targeted attacks. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity level. Exploitation requires no authentication or user interaction and can be performed remotely over the network. Although no known exploits are currently reported in the wild, the leak of internal hostnames can facilitate lateral movement or social engineering attacks. European organizations using Kentico Xperience should prioritize patching or mitigating this issue to protect internal infrastructure details. Countries with significant Kentico deployments and critical infrastructure relying on this CMS are at higher risk. Mitigation includes restricting access to authentication endpoints, implementing network segmentation, and monitoring for suspicious access patterns.

MediumVulnerabilityGermanyFranceNetherlands+4#cve#cve-2024-58320