Vulnerability Details CVE-2024-38885
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the client application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.7%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2024-38885
-
cpe:2.3:a:horizoncloud:caterease:16.0.1.1663
-
cpe:2.3:a:horizoncloud:caterease:24.0.1.2405