CVE-2020-14337CWE-209

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes

published July 31, 2020

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01488 · 73.9th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2020-07-31T12:42Z
EPSS history
Timeline
  • 31 JUL 12:42Z
    A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes
    cvelistv5