CVE-2017-15572 — Log File Information Exposure in Redmine

CWE-532 — Log File Information Exposure4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 31.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
RedmineDebian RedmineDebian Linux
Timeline
PublishedOct 18
Latest updateMay 14

Description

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/redmine< redmine 3.4.2-1 (bookworm)
▶Debianredmine/redmine< 3.4.2-1+1
▶NVDredmine/redmine3.2.5+3

Also affects: Debian Linux 9.0

Patches

Patch: www.redmine.org ↗Patch: www.redmine.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-69c8-w2qp-966r: In Redmine before 3↗2022-05-14
▶
OSV
CVE-2017-15572: In Redmine before 3↗2017-10-18
▶

📋Vendor Advisories

1
Debian
CVE-2017-15572: redmine - In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sens...↗2017
▶