CVE-2008-3717 Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| harmoni | <= 1.4.7 | No fix listed |
| harmoni | = 0.0.2 | No fix listed |
| harmoni | = 0.0.3 | No fix listed |
| harmoni | = 0.0.4 | No fix listed |
| harmoni | = 0.0.5 | No fix listed |
| harmoni | = 0.1.0 | No fix listed |
| harmoni | = 0.2.0 | No fix listed |
| harmoni | = 0.3.0 | No fix listed |
| harmoni | = 0.3.1 | No fix listed |
| harmoni | = 0.3.2 | No fix listed |
| harmoni | = 0.5.1 | No fix listed |
| harmoni | = 0.6.0 | No fix listed |
| harmoni | = 0.6.2 | No fix listed |
| harmoni | = 0.7.0 | No fix listed |
| harmoni | = 0.7.1 | No fix listed |
| harmoni | = 0.7.2 | No fix listed |
| harmoni | = 0.7.6 | No fix listed |
| harmoni | = 0.7.7 | No fix listed |
| harmoni | = 0.9.0 | No fix listed |
| harmoni | = 0.10.1 | No fix listed |
| harmoni | = 0.11.0 | No fix listed |
| harmoni | = 0.12.0 | No fix listed |
| harmoni | = 0.12.1 | No fix listed |
| harmoni | = 0.12.3 | No fix listed |
| harmoni | = 0.13.0 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| harmoni | = 0.13.1 | No fix listed |
| harmoni | = 0.13.2 | No fix listed |
| harmoni | = 0.13.3 | No fix listed |
| harmoni | = 0.13.4 | No fix listed |
| harmoni | = 0.13.5 | No fix listed |
| harmoni | = 0.13.6 | No fix listed |
| harmoni | = 0.13.7 | No fix listed |
| harmoni | = 1.0.0 | No fix listed |
| harmoni | = 1.0.1 | No fix listed |
| harmoni | = 1.0.2 | No fix listed |
| harmoni | = 1.0.3 | No fix listed |
| harmoni | = 1.0.5 | No fix listed |
| harmoni | = 1.0.6 | No fix listed |
| harmoni | = 1.1.0 | No fix listed |
| harmoni | = 1.3.0 | No fix listed |
| harmoni | = 1.3.2 | No fix listed |
| harmoni | = 1.3.4 | No fix listed |
| harmoni | = 1.3.5 | No fix listed |
| harmoni | = 1.4.2 | No fix listed |
| harmoni | = 1.4.6 | No fix listed |
References
- 31503 third-party-advisory vendor-advisory
- sourceforge.net
- sourceforge.net
- 30706 vdb-entry
- harmoni-security-bypass(44485) vdb-entry