CVSS4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:L/SA:L/AU:N/U:Red/R:U/V:C/RE:M
AI Score
Confidence
High
com.phloc:phloc-webscopes is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to improper handling of logged HTTP requests within RequestWebScopeNoMultipart.java
. This allows local attackers with access to the log files to view user passwords or other sensitive information.