CVE-2024-42027

Rocket.Chat / Mobile PUBLISHED

Description (CNA)

The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources.

Affected (CNA)

Vendor / product	Versions
Rocket.Chat / Mobile	affected 4.5.1 before 4.5.1

CWE

No CWE identifiers supplied.

References

https://hackerone.com/reports/2546437

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.