CVE-2024-6060

EUVD-2024-47218 · Published Jun 25, 2024

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

Weaknesses

CWE-532

CVSS scores

v4.09.3CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://www.sonatype.com/security-advisories/cve-2024-6060
https://sites.google.com/sonatype.com/vulnerabilities/cve-2024-6060

Potentially impacted assets

See if this affects your attack surface