NetSight
IP …
medium5.0

CVE-2008-3717

Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive info…

Impact

Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information.

Affected products

VendorProductAffected versions
HarmoniHarmoni
through 1.4.7
Versions 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.1.0

Weakness classification

CWE-264

References