Description (CNA)
Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Quiter / Quiter Gateway (Java WAR on Apache Tomcat) | affected 0 before 4.7.0 |
CWE
CWE-209
References
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter
ADP enrichment
No English description supplied.
No references supplied.