Security Advisory

CVE-2020-27986

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-28 22:57:20

Last updated 2024-08-04 16:25:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position for SMTP and SVN is "it is the administrator's responsibility to configure it.

← Browse all CVEs View on cve.org ↗