CVE-2020-10871

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services

published March 23, 2020

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other (more complex) ways, and there is no plan to restrict the information further

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.7th percentile
Published
2020-03-23T19:45Z
EPSS history
Timeline
  • 23 MAR 19:45Z
    In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services
    cvelistv5