CVE-2020-23284

Published: Jul 20, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application.

Affected (1)

Products: Mv: Idce

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mv Idce	Version 1.0

Related CWEs

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://github.com/ifmacedo/mconnect/blob/main/sensitiveDataExposure

Source: cve@mitre.org

Third Party Advisory

https://github.com/ifmacedo/mconnect/blob/main/sensitiveDataExposure

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.