Description

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.

Remediation

References

https://github.com/opengoofy/hippo4j/issues/1060

Related Vulnerabilities

CVE-2020-28168 Vulnerability in maven package org.webjars.bowergithub.axios:axios

CVE-2022-41931 Vulnerability in maven package org.xwiki.platform:xwiki-platform-icon-ui

CVE-2023-44981 Vulnerability in maven package org.apache.zookeeper:zookeeper

CVE-2023-50730 Vulnerability in maven package org.typelevel:grackle-core_3

CVE-2023-29212 Vulnerability in maven package org.xwiki.platform:xwiki-platform-panels-ui

Severity

High

Classification

CWE-732 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Vendor Advisory