Back to feed
EUVD-2019-0059 · Published May 24, 2022
Home Assistant information disclosure vulnerability Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Technologies
Home-Assistant Home-AssistantHomeassistant Homeassistant
Weaknesses
CWE-200
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://github.com/home-assistant/home-assistant/pull/13836
- https://github.com/home-assistant/home-assistant/releases/tag/0.67.0
- https://nvd.nist.gov/vuln/detail/CVE-2018-21019
- https://github.com/home-assistant/core/pull/13836
- https://github.com/home-assistant/core/commit/598f093bf0fecdefaa3d95d1ddae71317a05321e
- https://github.com/home-assistant/core
Potentially impacted assets
See if this affects your attack surface
