CVE-2024-27120 — Local File Inclusion in ComfortKey before version 24.1.2

CVE-2024-27120

Local File Inclusion in ComfortKey before version 24.1.2 PUBLISHED

Description (CNA)

A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the underlying system. The vulnerability has been remediated in version 24.1.2.

Affected (CNA)

Vendor / product	Versions
Celsius Benelux / ComfortKey	affected before 24.1.2

CWE

CWE-200

References

https://csirt.divd.nl/CVE-2024-27120
https://csirt.divd.nl/DIVD-2024-00031/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.