CVE-2024-22200
Assigner: GitHub_M
Published: 2024-01-30T15:56:43.527Z
State: PUBLISHED
title: vantage6-UI docker image leaks software version information
problemTypes: descriptions: cweId: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
affected: vendor: vantage6
product: vantage6-UI
versions: version: < 4.2.0
status: affected
descriptions: value: vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application.  This vulnerability was patched in 4.2.0.

source: advisory: GHSA-8wxq-346h-xmr8
discovery: UNKNOWN