Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file.
References
Link | Resource |
---|---|
https://github.com/aquaverde/aquarius-core | Third Party Advisory |
https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0 | Patch Third Party Advisory |
Configurations
History
No history.
Information
Published : 2019-07-15 18:15
Updated : 2024-02-28 17:08
NVD link : CVE-2019-1010308
Mitre link : CVE-2019-1010308
CVE.ORG link : CVE-2019-1010308
JSON object : View
Products Affected
aquaverde
- aquarius_cms
CWE
CWE-522
Insufficiently Protected Credentials