Aller au contenu
Se connecter
9.3 Critique

CVE-2023-32550 Landscape's server-status page exposed sensitive system information

Description

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.

Produits et versions touchés

Produit Versions touchées Corrigé en
Landscape 19.10 premières → < 19.10.05 19.10.05

Autres CVE de Landscape

Les 3 CVE de Landscape →
CVE-2023-32551 Landscape allowed URLs which caused open redirection 6.1 Moyenne CVE-2023-32549 Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator 6.8 Moyenne
Suivre cette CVE