CVE-2016-4426CWE-284

In zulip before 1.3.12, bot API keys were accessible to other users in the same realm

published July 28, 2022

CVSS
—
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00551 · 45.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-07-28T16:31Z
EPSS history
Timeline
  • 28 JUL 16:31Z
    In zulip before 1.3.12, bot API keys were accessible to other users in the same realm
    cvelistv5