Generation of Error Message Containing Sensitive Information

CVE-2024-21313

Medium

5.3/10

Summary

Windows TCP/IP Information Disclosure Vulnerability

Attack Complexity: HIGH
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: NONE

CWE-209 - Generation of Error Message Containing Sensitive Information

The software generates an error message that includes sensitive information about its environment, users, or associated data.

References

Advisory Timeline

Published Jan 09, 2024