CVE-2024-38881

CVE-2024-38881 describes a critical vulnerability in Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405, and potentially later, stemming from the storage of user passwords using unsalted one-way hashes. This flaw allows a remote attacker to execute a Rainbow Table password cracking attack, rated with a CVSS score of 7.5 (HIGH). The attack requires no user interaction and has low complexity, leading to high confidentiality impact as passwords can be compromised. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.