{"id":"CVE-2024-12604","aliases":["EUVD-2024-54148","GHSA-6rg8-wqvx-ghg5"],"status":"published","title":"Improper Authentication in Tapandsign Technologies Tap and Sign App","description":"Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap\u0026Sign App allows Password Recovery Exploitation, Functionality Misuse.\n\nThis issue affects Tap\u0026Sign App: before V.1.025.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00203,"percentile":0.10367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312","CWE-526","CWE-640"],"published":"2025-03-10T14:28:12Z","modified":"2026-06-17T07:00:07Z","products":[{"vendor":"tapandsign","product":"tap\\\u0026sign"},{"vendor":"tapandsign technologies","product":"tap\u0026sign app"}],"references":[{"url":"https://docs.tapandsign.com/tap-and-sign/tap-and-sign-v.1.025-surum-notlari","tags":["Release Notes"]},{"url":"https://www.usom.gov.tr/bildirim/tr-25-0063","tags":["government-resource","broken-link","Third Party Advisory"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0063","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12604"},{"url":"https://github.com/advisories/GHSA-6rg8-wqvx-ghg5"}],"sources":{"cve":[{"id":"CVE-2024-12604","title":"Improper Authentication in Tapandsign Technologies Tap and Sign App","description":"Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap\u0026Sign App allows Password Recovery Exploitation, Functionality Misuse.\n\nThis issue affects Tap\u0026Sign App: before V.1.025.","status":"published","published":"2025-03-10T14:28:12.23Z","modified":"2026-06-01T13:02:00.713Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-526","CWE-640"],"updated_at":"2026-11-02T14:34:12.635756Z"}],"euvd":[{"id":"EUVD-2024-54148","description":"Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap\u0026Sign App allows Password Recovery Exploitation, Functionality Misuse.\n\nThis issue affects Tap\u0026Sign App: before V.1.025.","status":"published","published":"2025-03-10T14:28:12Z","modified":"2026-06-01T13:02:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:58.729223Z"}],"ghsa":[{"id":"GHSA-6rg8-wqvx-ghg5","title":"Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery...","description":"Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap\u0026Sign App allows Password Recovery Exploitation, Functionality Misuse.This issue affects Tap\u0026Sign App: before V.1.025.","status":"published","published":"2025-03-10T15:30:48Z","modified":"2026-06-01T15:31:37Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-312","CWE-526"],"updated_at":"2026-11-02T15:08:26.890955Z"}],"nvd":[{"id":"CVE-2024-12604","description":"Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap\u0026Sign App allows Password Recovery Exploitation, Functionality Misuse.\n\nThis issue affects Tap\u0026Sign App: before V.1.025.","status":"published","published":"2025-03-10T15:15:36.947Z","modified":"2026-06-17T07:00:07.61Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-526","CWE-640","CWE-312"],"updated_at":"2026-11-02T14:10:45.422466Z"}]}}