Unauthenticated Access to Customer Data and Application Paths in CIPPlanner CIPAce 9.1 Build 2019092801

Unauthenticated Access to Customer Data and Application Paths in CIPPlanner CIPAce 9.1 Build 2019092801

CVE-2020-11588 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP GET request to two files that contain customer data and application paths.

Learn more about our Web Application Penetration Testing UK.