Information disclosure in Rhodecode Enterprise
CVE-2015-1613
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.
Vulnerability class: Information Disclosure
EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.
Affected products
- Rhodecode Rhodecode_enterprise
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)