CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
87.7%
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.
Vendor | Product | Version | CPE |
---|---|---|---|
hummingbird | collaboration | * | cpe:2.3:a:hummingbird:collaboration:*:*:*:*:*:*:*:* |
hummingbird | collaboration | 5.2 | cpe:2.3:a:hummingbird:collaboration:5.2:*:*:*:*:*:*:* |
hummingbird | enterprise_collaboration | * | cpe:2.3:a:hummingbird:enterprise_collaboration:*:*:*:*:*:*:*:* |
hummingbird | enterprise_collaboration | 5.2 | cpe:2.3:a:hummingbird:enterprise_collaboration:5.2:*:*:*:*:*:*:* |