VYPR
← All advisories
Low severity3.3NVD Advisory· Published Apr 2, 2024· Updated Jun 17, 2026

CVE-2024-2745

CVE-2024-2745

Description

Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded.  This vulnerability allows attackers to acquire sensitive information such as passwords, auth tokens, usernames etc.

The vulnerability is remediated in version 6.6.244.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Rapid7/InsightVM3 versions
    cpe:2.3:a:rapid7:insightvm:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:rapid7:insightvm:*:*:*:*:*:*:*:*range: <6.6.244
    • (no CPE)range: <6.6.244
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.