Beveiligingsadvies

CVE-2025-66573

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 20:45:13

Laatst bijgewerkt 2026-07-14 22:26:02

Toegewezen door VulnCheck

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.

← Alle CVE's bekijken Bekijk op cve.org ↗