← Back to CVE List

CVE-2024-45744

Published: 2024-09-27T16:15Z
Last Modified: 2025-02-18T19:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
TopQuadrant TopBraid EDG stores external credentials insecurely. An authenticated attacker with file system access can read edg-setup.properites and obtain the secret to decrypt external passwords stored in edg-vault.properties. An authenticated attacker could gain file system access using a separate vulnerability such as CVE-2024-45745. At least version 7.1.3 is affected. Version 7.3 adds HashiCorp Vault integration that does not store external passwords locally. Version 8.3.0 warns when using plain text secrets. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt