CVE-2019-19000CWE-202

eSOMS Cachecontrol (Pragma) HTTP Header

Medium · published April 2, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01079 · 64.8th percentile
Weakness
CWE-202 · Exposure of Sensitive Information Through Data Queries
Published
2020-04-02T19:49Z
EPSS history
Timeline
  • 02 APR 19:49Z
    eSOMS Cachecontrol (Pragma) HTTP Header
    cvelistv5