Information disclosure in Redhat Conga

CVE-2013-6496

Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluster, (3) storage, (4) portal_skins/custom, or (5) logs Luci extension.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.0th percentile) — read the EPSS interpretation.

Affected products

Redhat Conga — versions 0.12.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)