CVE-2020-29005

Опубликовано: 22 дек. 2020

Источник: redhat

CVSS3: 5.3

Описание

The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat OpenShift Container Platform 3.11	mediawiki	Not affected
Red Hat OpenShift Container Platform 4	mediawiki	Not affected

Показывать по

Статус:

Moderate

Дефект:

CWE-319->CWE-200

https://bugzilla.redhat.com/show_bug.cgi?id=1922225mediawiki: Information disclosure via cleartext transmitted ApiPush credentials

5.3 Medium

CVSS3

CVE-2020-29005

CVSS3: 7.5

nvd

около 5 лет назад

The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.

GHSA-m23v-gcxc-rq79

github

больше 3 лет назад

The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.

5.3 Medium

CVSS3