5 matches found
Information disclosure
Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application...
CVE-2020-23284
The CVE-2020-23284 entry concerns the MV IDCE application v1.0, where information disclosure can occur via crafted ASPX pages appended to the end of the URL, enabling access to internal/sensitive data without logging in. The description indicates the flaw affects end-to-end URL handling that inte...
PT-2021-10876
Name of the Vulnerable Software and Affected Versions MV's IDCE application version 1.0 Description The issue allows an attacker to access internal and sensitive information without logging into the web application by copying and pasting aspx pages at the end of the URL application, which connect...
CVE-2020-23284: Insertion of Sensitive Information into Log File
Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application...
MV IDCE application 日志信息泄露漏洞
The MV IDCE application is a software application. A log information disclosure vulnerability exists in the MV IDCE application. The vulnerability arises from the abnormal output of log files from a networked system or product...