Lucene search
K
RdbrckShift

6 matches found

CVE
CVE
added 2019/07/17 8:13 p.m.47 views

CVE-2019-8931

CVE-2019-8931 concerns Redbrick Shift up to version 3.4.3. The vulnerability enables an attacker to extract emails of external services (e.g., Gmail, Outlook) that are used by the application, indicating an information-disclosure flaw likely related to how credentials or service identifiers are h...

7.5CVSS7.4AI score0.01111EPSS
CVE
CVE
added 2019/07/17 8:6 p.m.44 views

CVE-2019-12911

The CVE-2019-12911 entry concerns Redbrick Shift (3.4.3 and prior). The vulnerability allows an attacker to extract authentication tokens from services (e.g., Gmail, Outlook) used by the application. The connected Red Hat, CNVD, and CVE records echo the same impact, indicating token exposure thro...

7.5CVSS7.6AI score0.01219EPSS
CVE
CVE
added 2019/07/17 8:9 p.m.43 views

CVE-2019-12914

Redbrick Shift up to version 3.4.3 has an information-disclosure vulnerability that lets an attacker extract authentication tokens for services used by the application (e.g., Gmail, Outlook). The issue is described as arising from configuration-related errors during operation in Shift 3.4.3 and e...

7.5CVSS7.6AI score0.01219EPSS
CVE
CVE
added 2019/07/17 8:11 p.m.41 views

CVE-2019-8932

Redbrick Shift vulnerability CVE-2019-8932 affects Shift 3.4.3 and earlier, allowing an attacker to extract authentication tokens from external services (e.g., Gmail, Outlook) used within the application. The current connected documents confirm affected versions but do not provide root-cause deta...

7.5CVSS7.6AI score0.0123EPSS
CVE
CVE
added 2019/07/17 8:19 p.m.40 views

CVE-2019-12913

CVE-2019-12913 affects Redbrick Shift up to version 3.4.3. The vulnerability is an information-disclosure issue caused by configuration during operation, enabling an attacker to extract emails of services (e.g., Gmail, Outlook) used by the application. Some connected records reiterate the disclos...

5.5CVSS5.5AI score0.00377EPSS
CVE
CVE
added 2019/07/17 8:16 p.m.37 views

CVE-2019-12912

Redbrick Shift 3.4.3 and earlier versions contain an information-disclosure vulnerability. According to CNVD-2019-38853, the flaw stems from configuration errors during operation of the system and can allow an attacker to obtain sensitive information, specifically emails of services (e.g., Gmail,...

5.5CVSS5.5AI score0.00377EPSS