Description

Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.

Related CPE's

a

domoticz

mydomoathome

0.240

*

*

*

*

node.js

Vulnerable

References

https://www.exploit-db.com/exploits/47824

ExploitThird Party AdvisoryVDB Entry

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php

ExploitThird Party Advisory

https://www.exploit-db.com/exploits/47824

ExploitThird Party AdvisoryVDB Entry

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-863

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-04-29T12:15:09.390Z

4 years ago

Last modified

2024-11-21T04:12:58.620Z

1 year ago