CVE-2024-42027 Information

Description

The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient allowing attackers to crack it if they have the appropriate time and resources.

Reference

https://hackerone.com/reports/2546437