Описание
TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users. This endpoint discloses sensitive internal information including PII to unauthenticated attackers.
Ссылки
- Third Party AdvisoryExploit
- Third Party AdvisoryExploit
- Product
- Third Party AdvisoryExploit
Уязвимые конфигурации
Конфигурация 1Версия до 7.10.4.0 (включая)
cpe:2.3:a:rocketsoftware:trufusion_enterprise:*:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.28385
Средний
7.5 High
CVSS3
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 7.5
github
6 дней назад
TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users. This endpoint discloses sensitive internal information including PII to unauthenticated attackers.
EPSS
Процентиль: 96%
0.28385
Средний
7.5 High
CVSS3
Дефекты
CWE-200