CVE-2020-10097

Опубликовано: 05 мар. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that disclose internal application or infrastructure information. This information could aid attackers in successfully exploiting other vulnerabilities.

Ссылки

https://zammad.com/news/security-advisory-zaa-2020-10
Patch
Vendor Advisory
https://zammad.com/news/security-advisory-zaa-2020-10
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*

Версия от 1.0.0 (включая) до 3.2.0 (включая)

EPSS

Процентиль: 58%

0.00363

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-209

Связанные уязвимости

CVE-2020-10097

CVSS3: 5.3

debian

почти 6 лет назад

An issue was discovered in Zammad 3.0 through 3.2. It may respond with ...

GHSA-ppg2-62fj-4rw3

github

больше 3 лет назад