CVE-2008-3717
19.08.2008, 19:41
Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| harmoni | harmoni | 𝑥 ≤ 1.4.7 |
| harmoni | harmoni | 0.0.2 |
| harmoni | harmoni | 0.0.3 |
| harmoni | harmoni | 0.0.4 |
| harmoni | harmoni | 0.0.5 |
| harmoni | harmoni | 0.1.0 |
| harmoni | harmoni | 0.2.0 |
| harmoni | harmoni | 0.3.0 |
| harmoni | harmoni | 0.3.1 |
| harmoni | harmoni | 0.3.2 |
| harmoni | harmoni | 0.5.1 |
| harmoni | harmoni | 0.6.0 |
| harmoni | harmoni | 0.6.2 |
| harmoni | harmoni | 0.7.0 |
| harmoni | harmoni | 0.7.1 |
| harmoni | harmoni | 0.7.2 |
| harmoni | harmoni | 0.7.6 |
| harmoni | harmoni | 0.7.7 |
| harmoni | harmoni | 0.9.0 |
| harmoni | harmoni | 0.10.1 |
| harmoni | harmoni | 0.11.0 |
| harmoni | harmoni | 0.12.0 |
| harmoni | harmoni | 0.12.1 |
| harmoni | harmoni | 0.12.3 |
| harmoni | harmoni | 0.13.0 |
| harmoni | harmoni | 0.13.1 |
| harmoni | harmoni | 0.13.2 |
| harmoni | harmoni | 0.13.3 |
| harmoni | harmoni | 0.13.4 |
| harmoni | harmoni | 0.13.5 |
| harmoni | harmoni | 0.13.6 |
| harmoni | harmoni | 0.13.7 |
| harmoni | harmoni | 1.0.0 |
| harmoni | harmoni | 1.0.1 |
| harmoni | harmoni | 1.0.2 |
| harmoni | harmoni | 1.0.3 |
| harmoni | harmoni | 1.0.5 |
| harmoni | harmoni | 1.0.6 |
| harmoni | harmoni | 1.1.0 |
| harmoni | harmoni | 1.3.0 |
| harmoni | harmoni | 1.3.2 |
| harmoni | harmoni | 1.3.4 |
| harmoni | harmoni | 1.3.5 |
| harmoni | harmoni | 1.4.2 |
| harmoni | harmoni | 1.4.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References