VULNERABILITY INTELLIGENCE
CVE-2024-6060
CVSS score9.3 CRITICAL
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-06-25
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red
Description
An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.
Weakness classification
- CWE-532: Insertion of Sensitive Information into Log File