6 matches found
CVE-2019-8931
CVE-2019-8931 concerns Redbrick Shift up to version 3.4.3. The vulnerability enables an attacker to extract emails of external services (e.g., Gmail, Outlook) that are used by the application, indicating an information-disclosure flaw likely related to how credentials or service identifiers are h...
CVE-2019-12911
The CVE-2019-12911 entry concerns Redbrick Shift (3.4.3 and prior). The vulnerability allows an attacker to extract authentication tokens from services (e.g., Gmail, Outlook) used by the application. The connected Red Hat, CNVD, and CVE records echo the same impact, indicating token exposure thro...
CVE-2019-12914
Redbrick Shift up to version 3.4.3 has an information-disclosure vulnerability that lets an attacker extract authentication tokens for services used by the application (e.g., Gmail, Outlook). The issue is described as arising from configuration-related errors during operation in Shift 3.4.3 and e...
CVE-2019-8932
Redbrick Shift vulnerability CVE-2019-8932 affects Shift 3.4.3 and earlier, allowing an attacker to extract authentication tokens from external services (e.g., Gmail, Outlook) used within the application. The current connected documents confirm affected versions but do not provide root-cause deta...
CVE-2019-12913
CVE-2019-12913 affects Redbrick Shift up to version 3.4.3. The vulnerability is an information-disclosure issue caused by configuration during operation, enabling an attacker to extract emails of services (e.g., Gmail, Outlook) used by the application. Some connected records reiterate the disclos...
CVE-2019-12912
Redbrick Shift 3.4.3 and earlier versions contain an information-disclosure vulnerability. According to CNVD-2019-38853, the flaw stems from configuration errors during operation of the system and can allow an attacker to obtain sensitive information, specifically emails of services (e.g., Gmail,...