PT-2020-2937 · Microsoft · Visual Studio Code Live Share Extension
CVSS v2.0
5.4
Medium
| Vector | AV:N/AC:H/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Visual Studio Code Live Share Extension (affected versions not specified)
Description
An information disclosure issue exists in Visual Studio Code Live Share Extension, where it exposes tokens in plain text. This could allow a remote attacker to gain unauthorized access to protected information by intercepting the token from the client to the server using a special server configuration.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Cleartext Transmission of Sensitive Information
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Visual Studio Code Live Share Extension