CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
70.0%
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.
Vendor | Product | Version | CPE |
---|---|---|---|
infinite_automation_systems | mango_automation | 2.5.0 | cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:*:*:*:*:*:*:* |
infinite_automation_systems | mango_automation | 2.5.5 | cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:*:*:*:*:*:*:* |
infinite_automation_systems | mango_automation | 2.6.0 | cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:*:*:*:*:*:*:* |