CVE-2024-2728— Information exposure vulnerability in the CIGESv2 system
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-2728
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information exposure vulnerability in the CIGESv2 system
Source: NVD (National Vulnerability Database)
Vulnerability Description
Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implementation of the TLS protocol.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
CIGESv2 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CIGESv2是CIGESv2公司的一个队列和预约管理系统。 CIGESv2存在信息泄露漏洞，该漏洞源于缺乏TLS协议的正确实现，导致本地攻击者可以拦截流量。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-2728
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-2728
请登录查看更多情报信息。
Same Patch Batch · Ciges · 2024-03-22 · 7 CVEs total
| CVE-2024-2722 | 9.8 CRITICAL | SQL injection vulnerability in the CIGESv2 system |
| CVE-2024-2723 | 9.8 CRITICAL | SQL injection vulnerability in the CIGESv2 system |
| CVE-2024-2724 | 9.8 CRITICAL | SQL injection vulnerability in the CIGESv2 system |
| CVE-2024-2725 | 7.5 HIGH | Exposure of Sensitive Information vulnerability in the CIGESv2 system |
| CVE-2024-2726 | 6.1 MEDIUM | Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system |
| CVE-2024-2727 | 6.1 MEDIUM | Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system |
IV. Related Vulnerabilities
Same product: CIGESv2
- CVE-2024-8161
SQL injection vulnerability in CIGESv2 system - CVE-2024-2727
Stored Cross-Site Scripting (Stored-XSS) vulnerability in th - CVE-2024-2726
Stored Cross-Site Scripting (Stored-XSS) vulnerability in th - CVE-2024-2725
Exposure of Sensitive Information vulnerability in the CIGES - CVE-2024-2724
SQL injection vulnerability in the CIGESv2 system
Same vendor: Ciges
- CVE-2024-8161
SQL injection vulnerability in CIGESv2 system - CVE-2024-2727
Stored Cross-Site Scripting (Stored-XSS) vulnerability in th - CVE-2024-2726
Stored Cross-Site Scripting (Stored-XSS) vulnerability in th - CVE-2024-2725
Exposure of Sensitive Information vulnerability in the CIGES - CVE-2024-2724
SQL injection vulnerability in the CIGESv2 system
Same weakness: CWE-200
- CVE-2026-42333
quarkus-openapi-generator has overly broad path-parameter ma - CVE-2026-8198
Activity Logs, User Activity Tracking, Multisite Activity Lo - CVE-2026-42456
AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (ID - CVE-2026-41520
Cillium exposes sensitive information included in the cilium - CVE-2026-25199
Apache CloudStack: Proxmox Extension Allows Unauthorized Cro
V. Comments for CVE-2024-2728
No comments yet