CVE-2024-6060CWE-532

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain…

Critical · published June 25, 2024

CVSS v4.0
9.3
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/AU:N/R:U/V:C/RE:M/U:Red
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-06-25T21:36Z
EPSS history
Timeline
  • 25 JUN 21:36Z
    An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain…
    cvelistv5