CVE-2024-1033CWE-200

openBI Datament.php agent information disclosure

Medium · published January 30, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252308.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00593 · 47.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-01-30T14:00Z
EPSS history
Timeline
  • 30 JAN 14:00Z
    openBI Datament.php agent information disclosure
    cvelistv5