CVE-2024-55557

9.8 CRITICAL
Published: December 16, 2024 Modified: April 15, 2026
View on NVD

Description

ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://apps.microsoft.com/detail/9nhtv46lg4nh?hl=en-us&gl=US
Source: cve@mitre.org
https://github.com/nroduit/Weasis/releases/tag/v4.5.1
Source: cve@mitre.org
https://github.com/partywavesec/CVE-2024-55557
Source: cve@mitre.org
https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1
Source: cve@mitre.org

4 reference(s) from NVD

Quick Stats

CVSS v3 Score
9.8 / 10.0
EPSS (Exploit Probability)
16.9%
95th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-798

Related CVEs

CVE-2026-41113 8.1
CVE-2026-40308 N/A
CVE-2026-40249 N/A
CVE-2026-40248 N/A
CVE-2026-40247 N/A