medium5.3
CVE-2015-8346
app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information ab…
Impact
app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redmine | Redmine | through 2.6.7 Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4 |
| Debian | Debian Linux | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2016/dsa-3529
- http://www.redmine.org/news/102
- https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c
- https://www.redmine.org/issues/21150
- http://www.debian.org/security/2016/dsa-3529
- http://www.redmine.org/news/102
- https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c
- https://www.redmine.org/issues/21150