Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-16804

Опубликовано: 13 нояб. 2017
Источник: nvd
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*
Версия до 3.2.7 (исключая)
cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 57%
0.00345
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

ubuntu логотип

CVE-2017-16804

CVSS3: 4.3
ubuntu
около 8 лет назад

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.

debian логотип

CVE-2017-16804

CVSS3: 4.3
debian
около 8 лет назад

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function ...

github логотип

GHSA-c2rv-c7wr-4chh

CVSS3: 4.3
github
больше 3 лет назад

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.

EPSS

Процентиль: 57%
0.00345
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200