CVE-2019-17321

2019-10-3020:42:57

CWE-200

krcert

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.9%

JSON

ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via session file path of HTTP response data. No authentication is required.

CNA Affected

[
  {
    "product": "REXPERT",
    "vendor": "ClipSoft",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0.527 and earlier"
      }
    ]
  }
]

References

www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35184