CVE-2019-12163

2019-05-1720:17:20

mitre

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

JSON

GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersion request.

References

packetstormsecurity.com/files/152964/GAT-Ship-Web-Module-1.30-Information-Disclosure.html

seclists.org/fulldisclosure/2019/May/32

seclists.org/fulldisclosure/2019/May/29