Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated attackers to access sensitive information. Remote attackers can send specially crafted requests to the REST API endpoints to retrieve potentially sensitive configuration data without authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2017-20217 Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated … https://www.cve.org/CVERecord?id=CVE-2017-20217
Post summary
The text announces an information disclosure vulnerability in Serviio PRO 1.8, detailing improper access control in the Configuration REST API that permits unauthenticated access.
CVE Alert: CVE-2017-20217 - Serviio - Serviio PRO - https://www.redpacketsecurity.com/cve-alert-cve-2017-20217-serviio-serviio-pro/ #OSINT #ThreatIntel #CyberSecurity #cve-2017-20217 #serviio #serviio-pro
Post summary
A CVE alert for CVE-2017-20217 affecting Serviio PRO is posted, but no further technical or remediation details are provided.