CVE-2020-11590

2020-04-0621:34:22

mitre

www.cve.org

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

48.9%

JSON

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to HealthPage.aspx and obtain the internal server name.

References

www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/