CVE-2008-3717

Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive…

published August 19, 2008

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01256 · 69.1th percentile
Published
2008-08-19T19:10Z
EPSS history
Timeline
  • 19 AUG 19:10Z
    Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive…
    cvelistv5