Lucene search

K
cveMitreCVE-2024-23760
HistoryFeb 12, 2024 - 10:15 p.m.

CVE-2024-23760

2024-02-1222:15:08
CWE-532
mitre
web.nvd.nist.gov
22
cve
2024
23760
cleartext storage
sensitive information
gambio
nvd

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

0

Percentile

14.0%

Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handler.log.txt under the webroot.

Affected configurations

Nvd
Node
gambiogambioMatch4.9.2.0
VendorProductVersionCPE
gambiogambio4.9.2.0cpe:2.3:a:gambio:gambio:4.9.2.0:*:*:*:*:*:*:*

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.7

Confidence

High

EPSS

0

Percentile

14.0%

Related for CVE-2024-23760