Information Disclosure

2022-01-1204:47:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

guacamole-common

information disclosure

vulnerability

private tunnel identifier

rest responses

authenticated attacker

active session

EPSS

0.001

Percentile

17.4%

JSON

guacamole-common is vulnerable to information disclosure. The vulnerability exists due to the incorrectly included private tunnel identifier in non-private details of some REST responses, allowing an authenticated attacker to interact with another user’s active session.