CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2.
Explanation of Vulnerability in Simple Terms
MBE eShip versions up to 2.1.2 expose sensitive information over the network without requiring authentication or user interaction. An attacker can read this data directly by sending network requests to the application. The vulnerability affects confidentiality but not data integrity or availability. Update to a version newer than 2.1.2.
What an attacker can do
Read sensitive information from the application without authentication.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers on the network.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
