CVE-2024-42027

—

CVSS 3.1

6.7 medium

EPSS

<1%p44

Published

Oct 7, 2024 (Oct 7, 2024)

Modified

Jun 17, 2026

Description

The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they have the appropriate time and resources.

Weakness: CWE-1391
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.