Description (CNA)
ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via session file path of HTTP response data. No authentication is required.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ClipSoft / REXPERT | affected 1.0.0.527 and earlier |
CWE
CWE-200
References
ADP enrichment
No English description supplied.