Lucene search
MitreCVELIST:CVE-2020-27986HistoryOct 28, 2020 - 10:57 p.m.
CVE-2020-27986
2020-10-2822:57:20
mitre
www.cve.org
SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor’s position for SMTP and SVN is "it is the administrator’s responsibility to configure it.
Related
nvd
nvd
CVE-2020-27986
2020-10-28 23:15:12
cve
cve
CVE-2020-27986
2020-10-28 23:15:12
prion
prion
Code injection
2020-10-28 23:15:00
vulnrichment
vulnrichment
CVE-2020-27986
2020-10-28 22:57:20
nuclei
nuclei
SonarQube - Authentication Bypass
2021-01-30 09:51:50