4 matches found
CVE-2021-41123
Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counters, including count of interviews, or count of assignments...
CVE-2021-41123
creationtimestamp| type| source ---|---|--- 2021-10-05 02:29:34+00:00| seen| https://t.me/cibsecurity/29949...
CVE-2021-41123
CVE-2021-41123 relates to Survey Solutions where the Headquarters application exposes a public /metrics endpoint in affected releases. The vulnerability stems from an information-disclosure risk exposing only aggregate counters (e.g., interviews, assignments) rather than survey answers; there is ...
CVE-2021-41123 Exposure of Sensitive Information to an Unauthorized Actor in WB.UI.Headquarters.dll
Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counters, including count of interviews, or count of assignments...