CVE-2024-3928

Published: Apr 18, 2024Modified: Jun 17, 2026Deferred

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: CNA (Secondary)

Description

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261367.

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

https://github.com/ggfzx/OCP-Security-Misconfiguration/tree/main

Source: cna@vuldb.com

https://vuldb.com/?ctiid.261367

Source: cna@vuldb.com

https://vuldb.com/?id.261367

Source: cna@vuldb.com

https://vuldb.com/?submit.313847

Source: cna@vuldb.com

https://github.com/ggfzx/OCP-Security-Misconfiguration/tree/main

Source: af854a3a-2127-422b-91ae-364da2661108

https://vuldb.com/?ctiid.261367

Source: af854a3a-2127-422b-91ae-364da2661108

https://vuldb.com/?id.261367

Source: af854a3a-2127-422b-91ae-364da2661108

https://vuldb.com/?submit.313847

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.