CVE-2017-14943

Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to…

published October 10, 2017

CVSS
—
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the "webwatch.(REDACTED).com" server mentioned in the reference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01104 · 65.3th percentile
Published
2017-10-10T06:00Z
EPSS history
Timeline
  • 10 OCT 06:00Z
    Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to…
    cvelistv5