CVE-2019-17321CWE-200

ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue

published October 30, 2019

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via session file path of HTTP response data. No authentication is required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00930 · 60.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-10-30T20:42Z
EPSS history
Timeline
  • 30 OCT 20:42Z
    ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue
    cvelistv5