Cobalt

Multiple unauthenticated API endpoints under '/w/api/*' expose sensitive application configuration data to remote attackers. The leaked information includes cleartext LDAP credentials, SAML configuration, user accounts, and directory settings. Additionally, affected responses are served with Cache-Control: public headers and without Vary: Cookie, which allows reverse proxies and Content Delivery Networks (CDNs) to cache and serve this sensitive data to unauthenticated users even after authentication is implemented.