CVE-2019-5641CWE-200

Rapid7 InsightVM Information Disclosure after Logout

Low · published September 21, 2022

CVSS v3.1
3.3
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-09-21T14:45Z
EPSS history
Timeline
  • 21 SEP 14:45Z
    Rapid7 InsightVM Information Disclosure after Logout
    cvelistv5