CVEvulnerability
CVE-2015-8346
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-04-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-199
Description
app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form.
Affected configurations
• redmine redmine (<= 2.6.7)
• redmine redmine 3.0.0
• redmine redmine 3.0.1
• redmine redmine 3.0.2
• redmine redmine 3.0.3
• redmine redmine 3.0.4
• redmine redmine 3.0.5
• redmine redmine 3.1.0
• redmine redmine 3.1.1
• debian debian linux 8.0
Related
Weakness · not in database (1)
References
- http://www.debian.org/security/2016/dsa-3529 www.debian.org
- http://www.redmine.org/news/102 Patch, Vendor Advisory
- https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c github.com
- https://www.redmine.org/issues/21150 www.redmine.org
- http://www.debian.org/security/2016/dsa-3529 www.debian.org
- http://www.redmine.org/news/102 Patch, Vendor Advisory
- https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c github.com
- https://www.redmine.org/issues/21150 www.redmine.org