Security Advisory

CVE-2015-1613

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-02-16 15:00:00
Last updated 2024-09-16 23:36:55
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.