CVE-2024-8644 - CVE House
Back to Database
Status published Critical CVE-2024-8644

Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Vulnerability Description

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking). This issue affects ValeApp: before v2.0.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8644

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Yusuf Kamil ÇAVUŞOĞLU
  • HAVELSAN Inc.

References

More from Oceanic Software

View All →
CVE-2024-8643
Session Hijacking in Oceanic Software's ValeApp
Critical 9.3
CVE-2024-8609
Improper Access Control in Oceanic Software's ValeApp
High 8.8
CVE-2024-8608
Stored XSS in Oceanic Software's ValeApp
High 7.2
CVE-2024-8607
SQLi in Oceanic Software's ValeApp
High 8.7

Affected Vendor

Oceanic Software

View all reports →

Affected Software

ValeApp
Vulnerable Versions:
0

Timeline

Official Publish: September 27th, 2024
Last Modified: June 2nd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-315

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.