CVE-2024-40582

HighCVSS 7.5

Published: 09/12/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Pentaminds CuroVMS version 2.0.1 was found to expose sensitive information. This vulnerability allows unauthorized users to access protected data.

Risk Assessment

The risk involves potential leakage of confidential organizational data, such as customer information, system configurations, or credentials, which could lead to security breaches and financial losses.

Recommendation

It is recommended to immediately update Pentaminds CuroVMS to the latest available version that fixes this vulnerability. Additionally, perform a security audit to identify other potential weaknesses.

Other vulnerabilities in Pentaminds CuroVMS

CVE-2024-40583Critical
Pentaminds CuroVMS version 2.0.1 was found to have exposed credentials. This means authentication data (e.g., passwords, API keys) is stored or transmitted in a way that allows unauthorized reading.

Original NVD description (English source)

Pentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information.