Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p8pw-f2qh-mrc2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality.

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality.

EPSS

Процентиль: 75%
0.00875
Низкий

Связанные уязвимости

CVSS3: 5.8
redhat
больше 5 лет назад

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 5.8
nvd
больше 5 лет назад

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality.

EPSS

Процентиль: 75%
0.00875
Низкий