CVE-2019-19091CWE-202

ABB eSOMS: HTTP response information leakage

Medium · published April 2, 2020

CVSS v3.1
4.3
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. An attacker might use this detail information to specifically craft the attack.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00764 · 55.0th percentile
Weakness
CWE-202 · Exposure of Sensitive Information Through Data Queries
Published
2020-04-02T19:46Z
EPSS history
Timeline
  • 02 APR 19:46Z
    ABB eSOMS: HTTP response information leakage
    cvelistv5