1 matches found
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
SummaryIn Central Browser mode, the /api/4/serverslist endpoint returns raw server objects from GlancesServersList.getserverslist. Those objects are mutated in-place during background polling and can contain a uri field with embedded HTTP Basic credentials for downstream Glances servers, using th...
9.1CVSS6.6AI score0.00472EPSS
SaveExploits1References7Affected Software1
20