medium5.3
CVE-2018-7056
RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.
Impact
RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steelcase | Roomwizard Firmware | before 4.4.0 |