CVE-2017-15572General(debian / debian_linux)

LOWCVSS 7.5 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.

debian CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

Weakness type (CWE)

CWE-532

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

debian_linux
redmine

Threat summary

3 mentions across 1 observed day

What's happening

General: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

debian redmine

Products

debian_linuxredmine

4 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

General

3100.0%

Referenced assets1 URL

By indicator

https://cti.loginsoft.com/ip/170.106.11.141

Full discourse3 posts

Loginsoft Threat Intel@Loginsoft_Intel92d
General
Cytellite recent detection targeting CVE-2017-15572 — Tencent Building, Kejizhongyi Avenue Visit -- https://cti.loginsoft.com/ip/170.106.11.141 #Loginsoft #Cytellite #Cybersecurity #CVE201715572 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/nZoZoftbvp
Post summary
Cytellite reports recent detection of activity targeting CVE‑2017‑15572 around the Tencent Building, but provides no technical, exploit, or mitigation details.
0000016
22 followersView on X
Loginsoft Threat Intel@Loginsoft_Intel92d
General
Cytellite recent detection targeting CVE-2017-15572 — Tencent Building, Kejizhongyi Avenue Visit -- https://cti.loginsoft.com/ip/170.106.11.141 #Loginsoft #Cytellite #Cybersecurity #CVE201715572 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/oDeYLRfVSr
Post summary
The tweet reports a detection of activity related to CVE-2017-15572 but provides no technical, exploit, or mitigation details.
0000017
22 followersView on X
Loginsoft Threat Intel@Loginsoft_Intel92d
General
Cytellite recent detection targeting CVE-2017-15572 — Tencent Building, Kejizhongyi Avenue Visit -- https://cti.loginsoft.com/ip/170.106.11.141 #Loginsoft #Cytellite #Cybersecurity #CVE201715572 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/X37KlQP2aP
Post summary
A brief notice linking to detection of CVE‑2017‑15572, but with no additional technical or operational detail is provided.
0000014
22 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	debian	debian_linux	9.0	-	-
App	redmine	redmine	-	-	-
App	redmine	redmine	3.3.0	-	-
App	redmine	redmine	3.3.1	-	-
App	redmine	redmine	3.3.2	-	-

Explore more

Back to dashboard debian CVEs redmine CVEs debian_linux vulnerabilities