CVE-2023-27096

EUVD-2023-1028
Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
opengoofyhippo4j
1.4.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/opengoofy/hippo4j/issues/1060
https://github.com/opengoofy/hippo4j/issues/1060