Veracode Vulnerability DatabaseVERACODE:44712Sensitive Information Disclosure
4.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.5%
homeassistant is vulnerable to Sensitive Information Disclosure. The vulnerability arises due to the login page exposing user accounts to unauthenticated attackers on the LAN. An attacker is able to read application data as a result of exploitation of this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| homeassistant | le | 2023.12.2 | |
| homeassistant | le | 2023.12.2 |
Related
4.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.5%