CVE-2023-6916CWE-201

Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1

High · published April 10, 2024

CVSS v4.0
7.5
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

Audit records for OpenAPI requests may include sensitive information.

This could lead to unauthorized accesses and privilege escalation.

The record
Technical detail
CVSS v4.0
7.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00570 · 46.4th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2024-04-10T15:50Z
EPSS history
Timeline
  • 10 APR 15:50Z
    Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1
    cvelistv5