CVE-2020-15003

2020-10-2304:54:27

mitre

www.cve.org

cve-2020-15003

information exposure

session api

shared drive access

user-agent

ip address

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).

References

seclists.org/fulldisclosure/2020/Oct/20

www.open-xchange.com/