Lucene search
PRIOn knowledge basePRION:CVE-2020-27986HistoryOct 28, 2020 - 11:15 p.m.
Code injection
2020-10-2823:15:00
PRIOn knowledge base
www.prio-n.com
5
SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor’s position for SMTP and SVN is "it is the administrator’s responsibility to configure it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonarqube | eq | 8.4.2.36762 |
Related
nvd
nvd
CVE-2020-27986
2020-10-28 23:15:12
vulnrichment
vulnrichment
CVE-2020-27986
2020-10-28 22:57:20
cve
cve
CVE-2020-27986
2020-10-28 23:15:12
cvelist
cvelist
CVE-2020-27986
2020-10-28 22:57:20
nuclei
nuclei
SonarQube - Authentication Bypass
2021-01-30 09:51:50