CVE-2024-6060

Summary

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

Affected Software

Weaknesses

• CWE-532: CWE-532 Insertion of Sensitive Information into Log File

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://sites.google.com/sonatype.com/vulnerabilities/cve-2024-6060

References

• https://www.sonatype.com/security-advisories/cve-2024-6060

• ←Previous
• Next→