CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in LWS LWS Hide Login allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LWS Hide Login: from n/a through 2.1.8.
Explanation of Vulnerability in Simple Terms
LWS Hide Login versions up to 2.1.8 expose sensitive information through improper access controls. An attacker can retrieve login page details without authentication, though significant effort is required. The exposure is limited to confidentiality; integrity and availability are not affected. Update to a version newer than 2.1.8.
What an attacker can do
Retrieve sensitive login page information without authentication.
Potential impact on your site
Login page details may be exposed to unauthenticated visitors, potentially aiding reconnaissance.
Conditions required to exploit
Network access; no authentication required, but exploitation requires high attack complexity.
Key dates
External resources
Related vulnerabilities
