Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8q8c-hxch-vm5p

Опубликовано: 23 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

EPSS

Процентиль: 11%
0.00038
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
nvd
8 месяцев назад

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

EPSS

Процентиль: 11%
0.00038
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200