Lucene search

K
githubGitHub Advisory DatabaseGHSA-MXH8-XGQ9-W782
HistoryMay 01, 2022 - 5:47 p.m.

MoinMoin Insertion of Sensitive Information into Log File

2022-05-0117:47:55
CWE-532
GitHub Advisory Database
github.com
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

An information leak was discovered in MoinMoin’s debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add “show_traceback=0” to their site configurations to disable debug tracebacks.

Affected configurations

Vulners
Node
moinMatch1.5.7
CPENameOperatorVersion
moineq1.5.7

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%