CVE-2024-31483
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol
Medium · published May 14, 2024
What it is
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.
The record
Technical detail
- CVSS v3.1
- 4.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00413 · 34.5th percentile
- Published
- 2024-05-14T22:37Z
EPSS history
Timeline