CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2.
Explanation of Vulnerability in Simple Terms
Posti Shipping versions 3.10.2 and earlier expose sensitive information through error messages or debug output. An attacker on the network can retrieve partial data without authentication. The vulnerability has a low confidentiality impact and does not affect data integrity or availability. Update to a version newer than 3.10.2 to remediate.
What an attacker can do
Read sensitive information from the application without authentication.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers, potentially revealing system details or configuration information.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
