PT-2022-18669

CVE-2022-27888

·

Published

2022-04-26

·

Updated

2022-05-05

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Foundry Issues service versions 2.244.0 through 2.249.0
Description The issue concerns the logging mechanism in the Foundry Issues service, which captured sensitive information, specifically session tokens. This problem was resolved in version 2.249.1.
Recommendations For versions 2.244.0 through 2.249.0, update to version 2.249.1 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-532: Insertion of Sensitive Information into Log File
Related identifiers
CVE-2022-27888
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com