CVE-2020-35584

In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature

published December 23, 2020

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature. An attacker suitably positioned to view a legitimate user's network traffic could record and monitor their interactions with the web services and obtain any information the user supplies, including Administrator passwords and screen keys.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00761 · 54.8th percentile
Published
2020-12-23T14:53Z
EPSS history
Timeline
  • 23 DEC 14:53Z
    In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature
    cvelistv5