CVE-2008-3503

2008-08-0618:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.9%

JSON

RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds, which allows remote attackers to obtain sensitive information (CS data).

References

secunia.com/advisories/30782

www.securityfocus.com/bid/29927

www.vupen.com/english/advisories/2008/1932/references

www.webgui.org/bugs/tracker/security-issue---collaboration-rss/

www.webgui.org/getwebgui/advisories/webgui-7_5_13-beta-released

exchange.xforce.ibmcloud.com/vulnerabilities/43344