high7.5
CVE-2017-15576
Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.
Impact
Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redmine | Redmine | through 3.2.5 Versions 3.3.0, 3.3.1, 3.3.2 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.debian.org/security/2018/dsa-4191
- https://www.redmine.org/issues/23803
- https://www.redmine.org/projects/redmine/wiki/Security_Advisories
- https://www.debian.org/security/2018/dsa-4191
- https://www.redmine.org/issues/23803
- https://www.redmine.org/projects/redmine/wiki/Security_Advisories