Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hhvh-4rv2-p55m

Опубликовано: 23 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

An information exposure vulnerability exists in

Vulnerability in HCL Software ZIE for Web.

The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the application can hijack user sessions

This issue affects ZIE for Web: v16.

An information exposure vulnerability exists in

Vulnerability in HCL Software ZIE for Web.

The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the application can hijack user sessions

This issue affects ZIE for Web: v16.

EPSS

Процентиль: 20%
0.00284
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-598

Связанные уязвимости

CVSS3: 5.9
nvd
4 месяца назад

An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the application can hijack user sessions This issue affects ZIE for Web: v16.

EPSS

Процентиль: 20%
0.00284
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-598