CVE-2024-6060
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jun 25, 2024
- Updated
- Dec 30, 2025
- Reserved
- Jun 17, 2024
Description
An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/AU:N/R:U/V:C/RE:M/U:Red | Sonatype |
Weaknesses
- CWE-532 Insertion of Sensitive Information into Log File
Affected Products
| Product | Versions |
|---|---|
WebscopesPhloc |
|
References
- https://www.sonatype.com/security-advisories/cve-2024-6060third-party-advisory
- https://sites.google.com/sonatype.com/vulnerabilities/cve-2024-6060third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.