Paper/Archive/CVE-2024-6060

CVE-2024-6060

Phloc Webscopes — An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP…

EPSS 0.2%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 7.9.079 × 201.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

Affected

ProductAffectedFixed inSource

Webscopes7.0.0–CNA

Webscopespkg:maven/com.phloc/[email protected]–CNA

webscopes7.0.0–CISA-ADP

webscopespkg:maven/com.phloc/[email protected]–CISA-ADP

Scores by source

Sonatype (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/AU:N/R:U/V:C/RE:M/U:Red

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

writeupsonatype.com/security-advisories/cve-2024-6060 writeupsites.google.com/sonatype.com/vulnerabilities/cve-2024-6060