Описание
Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later.
Ссылки
- ExploitIssue TrackingVendor Advisory
- PatchThird Party Advisory
- ExploitIssue TrackingVendor Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.0.1-3 (включая)
cpe:2.3:o:univention:univention_corporate_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.0027
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-213
CWE-200
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later.
EPSS
Процентиль: 50%
0.0027
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-213
CWE-200