CVE-2024-32967
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Zitadel exposes internal database user name and host information
Zitadel is an open source identity management system. In case ZITADEL could not connect to the database, connection information including db name, username and db host name could be returned to the user. This has been addressed in all supported release branches in a point release. There is no workaround since a patch is already available. Users are advised to upgrade.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
zitadel
- Vendor
- zitadel
- Product
- zitadel
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 2.45.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| >= 2.46.0,< 2.46.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| >= 2.47.0, < 2.47.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| >= 2.48.0, < 2.48.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| >= 2.49.0, < 2.49.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| >= 2.50.0, < 2.50.3 | affected | Unavailable | Unavailable | Unavailable | None listed |