{"id":"CVE-2024-49201","aliases":["EUVD-2024-43808","GHSA-77mp-qmr4-jggx"],"status":"published","title":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows...","description":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00292,"percentile":0.21955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-922"],"published":"2024-12-18T00:00:00Z","modified":"2026-10-28T02:31:04Z","references":[{"url":"https://keyfactor.com","tags":["web"]},{"url":"https://github.com/Keyfactor/remote-file-orchestrator/releases/tag/2.8.1","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49201","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-77mp-qmr4-jggx"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49201.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-49201","description":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.","status":"published","published":"2024-12-18T00:00:00Z","modified":"2024-12-20T23:32:02.021Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:33:56.402064Z"}],"euvd":[{"id":"EUVD-2024-43808","description":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.","status":"published","published":"2024-12-18T00:00:00Z","modified":"2024-12-20T23:32:02Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:33.692832Z"}],"ghsa":[{"id":"GHSA-77mp-qmr4-jggx","title":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows...","description":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.","status":"published","published":"2024-12-18T21:30:55Z","modified":"2024-12-21T00:34:10Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:59:15.325282Z"}],"nvd":[{"id":"CVE-2024-49201","description":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.","status":"published","published":"2024-12-18T19:15:11.077Z","modified":"2026-06-17T07:59:30.423Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:10:40.507978Z"}],"osv":[{"id":"CVE-2024-49201","description":"Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.","status":"published","published":"2024-12-18T00:00:00Z","modified":"2026-10-28T02:31:04.789779767Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:43.597758Z"}]}}