VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/CERTCC/VINCE/ |
History
Mon, 09 Dec 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 05 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Cert
Cert vince |
|
CPEs | cpe:2.3:a:cert:vince:*:*:*:*:*:*:*:* | |
Vendors & Products |
Cert
Cert vince |
|
Metrics |
cvssV3_1
|
Mon, 28 Oct 2024 15:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users. | |
Title | CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view. | |
Weaknesses | CWE-276 | |
References |
|
MITRE
Status: PUBLISHED
Assigner: certcc
Published: 2024-10-28T15:38:29.062Z
Updated: 2024-12-09T20:34:11.518Z
Reserved: 2024-10-28T15:20:34.868Z
Link: CVE-2024-10469
Vulnrichment
Updated: 2024-12-09T20:34:00.778Z
NVD
Status : Analyzed
Published: 2024-10-28T16:15:03.667
Modified: 2024-11-05T16:51:35.450
Link: CVE-2024-10469
Redhat
No data.