Lucene search
HistoryFeb 12, 2024 - 10:15 p.m.
CVE-2024-23760
cleartext storage
sensitive information
gambio 4.9.2.0
error-handler.log.json
legacy-error-handler.log.txt
webroot
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
3.5
Confidence
High
EPSS
0
Percentile
14.0%
Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handler.log.txt under the webroot.
Affected configurations
Node
gambiogambioMatch4.9.2.0
Related
vulnrichment
vulnrichment
CVE-2024-23760
2024-02-12 00:00:00
cve
cve
CVE-2024-23760
2024-02-12 22:15:08
prion
prion
Information disclosure
2024-02-12 22:15:00
cvelist
cvelist
CVE-2024-23760
2024-02-12 00:00:00
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
3.5
Confidence
High
EPSS
0
Percentile
14.0%
Related for NVD:CVE-2024-23760