VULNERABILITY INTELLIGENCE

CVE-2019-17321

CVSS score5.3 MEDIUM
EPSS probability0.93%
CISA KEVNot currently listed
Published2019-10-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via session file path of HTTP response data. No authentication is required.

Weakness classification

  • vuln@krcert.or.kr: CWE-200
  • nvd@nist.gov: CWE-200

Primary references