Vendor
SecObserve
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
SecObserve before 1.59.1 Information Disclosure via API Configuration
SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basic_auth_password field from API configuration responses. View-only product members can retrieve the decrypted basic-…