CVE-2024-23685

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.

Affected Software (2)

VendorProductVersion
— — 0 < 1.7.2
— — 2.0.0 < 2.0.3

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.53%
Raw Score 0.005270
Percentile 45.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00527
2026-11-12
0.00527
2026-11-10
0.00527
2026-11-09
0.00527
2026-11-08
0.00527

Intelligence Sources

mitre ref →