Description (CNA)
SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Smartertools / SmarterTools SmarterTrack | affected 10.0; affected 14.0 |
CWE
CWE-497
References
- https://www.exploit-db.com/exploits/50328
- https://www.smartertools.com/
- https://www.smartertools.com/smartertrack
- https://www.vulncheck.com/advisories/smartertools-smartertrack-information-disclosure
ADP enrichment
No English description supplied.