Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with database access to read the password of the users who login to the application by querying the database table.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMDBuild 日志信息泄露漏洞
Vulnerability Description
CMDBuild是一个开源 Web 企业环境，用于配置自定义应用程序以进行资产管理。 CMDBuild 3.0版本至3.3.2版本存在安全漏洞，该漏洞源于CMDBuild 3.0版本至3.3.2版本的有效载荷请求保存在临时日志表中，攻击者利用该漏洞查询数据库表来读取登录到应用程序的用户密码。
CVSS Information
N/A
Vulnerability Type
N/A