CVE-2024-42056

Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data. Credentials for users with "Use" permissions can be discovered (by an authenticated attacker) via the /api/resources endpoint. The earliest affected version is 3.18.1.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://docs.retool.com/disclosures/cve-2024-42056	Vendor Advisory
https://docs.retool.com/releases	Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:retool:retool:*:*:*:*:*:*:*:*

History

13 Mar 2025, 18:15

Type	Values Removed	Values Added
CWE		CWE-352

Information

Published : 2024-08-22 01:15

Updated : 2025-03-13 18:15

NVD link : CVE-2024-42056

Mitre link : CVE-2024-42056

CVE.ORG link : CVE-2024-42056

JSON object : View

Products Affected

retool

retool

CWE

CWE-532

Insertion of Sensitive Information into Log File

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2024-42056", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-08-22T01:15:03.460", "references": [{"url": "https://docs.retool.com/disclosures/cve-2024-42056", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://docs.retool.com/releases", "tags": ["Release Notes"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-532"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data. Credentials for users with \"Use\" permissions can be discovered (by an authenticated attacker) via the /api/resources endpoint. The earliest affected version is 3.18.1."}, {"lang": "es", "value": "Retool (empresa autohospedada) hasta 3.40.0 inserta credenciales de autenticaci\u00f3n de recursos en los datos enviados. Las credenciales de los usuarios con permisos de \"Uso\" pueden ser descubiertas (por un atacante autenticado) a trav\u00e9s del endpoint /api/resources. La primera versi\u00f3n afectada es la 3.18.1."}], "lastModified": "2025-03-13T18:15:43.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:retool:retool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "094346BD-34B2-4F5B-9F13-E30C78932146", "versionEndIncluding": "3.40.0", "versionStartIncluding": "3.18.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}