What is CVE-2024-6060?

CVE-2024-6060 is a vulnerability in Phloc Webscopes, classified under Insertion of Sensitive Information into Log File. Published 2024-06-25.

Is CVE-2024-6060 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Phloc Webscopes

CVE-2024-6060

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

EPSS: 0.002 (8.2th percentile) — read the EPSS interpretation.

Affected products

Phloc Webscopes — versions 7.0.0, pkg:maven/com.phloc/phloc-webscopes@7.0.0

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

103e4ec9-0a87-450b-af77-479448ddef11 (third-party-advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2024-6060?: CVE-2024-6060 is a vulnerability in Phloc Webscopes, classified under Insertion of Sensitive Information into Log File. Published 2024-06-25.
Is CVE-2024-6060 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.