Generation of Error Message Containing Sensitive Information

CVE-2019-1020013

Medium

5.3/10

Summary

parse-server before 3.6.0 allows account enumeration.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: LOW
Availability Impact: NONE

CWE-209 - Generation of Error Message Containing Sensitive Information

The software generates an error message that includes sensitive information about its environment, users, or associated data.

References

Advisory Timeline

Published Jul 29, 2019