CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bogdan Bendziukov Squeeze squeeze allows Retrieve Embedded Sensitive Data.This issue affects Squeeze: from n/a through <= 1.6.
Explanation of Vulnerability in Simple Terms
Squeeze versions 1.6 and earlier contain an exposure of sensitive information to an authenticated high-privilege user. An attacker with administrative access can read data that should be restricted. The vulnerability requires network access and high-level privileges but no user interaction. Update to version 1.7 or later to remediate.
What an attacker can do
Read sensitive data restricted to other users or components.
Potential impact on your site
Administrators with malicious intent can access confidential information they should not see.
Conditions required to exploit
Attacker must have high-level administrative privileges on the site.
Key dates
External resources
Related vulnerabilities
