Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-10591

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6566-9526-52v6

Exposure of Sensitive Information to an Unauthorized Actor in Concord An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.

gitlab/maven/com.walmartlabs.concord/concord-common/CVE-2020-10591

Exposure of Sensitive Information to an Unauthorized Actor in Concord An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.

gitlab/maven/com.walmartlabs.concord.docker/concord-common/CVE-2020-10591

Exposure of Sensitive Information to an Unauthorized Actor in Concord An issue was discovered in Walmart Labs Concord CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.