CVE-2018-21019

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...

CVE-2018-21019

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...

fauxmo (>=0.1.0, <=0.3.6) potentially affected by CVE-2018-21019 via homeassistant (>=0.10.1, <=0.31.1)

homeassistant PYPI version =0.10.1, =0.1.0, =0.3.6 Source cves: CVE-2018-21019 Source advisory: OSV:PYSEC-2019-221...

CVE-2018-21019

Home Assistant pre-0.67.0 contains an information-disclosure vulnerability: an unauthenticated attacker can read the application’s error log via components/api.py. A fix is available in the 0.67.0 release and newer (per release and advisories). No exploitation details are provided beyond this in ...