4
CVSSv2

CVE-2015-1613

Published: 16/02/2015 Updated: 17/02/2015
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

RhodeCode prior to 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

Vulnerable Product Search on Vulmon Subscribe to Product

rhodecode rhodecode enterprise