CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.5.4.
Explanation of Vulnerability in Simple Terms
Barcode Scanner with Inventory & Order Manager versions 1.5.4 and earlier expose sensitive information through the network without requiring authentication. An attacker can read non-critical data by sending network requests to the application. The vulnerability has a low confidentiality impact and does not affect data integrity or availability.
What an attacker can do
Read sensitive information from the application over the network without logging in.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers on the network.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
