Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2020-36876

ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running on the device. Attackers can access sensitive information by visiting the message_log page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ReQuest Serious Play LLC ReQuest Serious Play Pro

Default version status: unknown

  • 7.0.3.4968affected

ReQuest Serious Play LLC ReQuest Serious Play

Default version status: unknown

  • 7.0.2.4954affected
  • 6.5.2.4954affected
  • 6.4.2.4681affected
  • 6.3.2.4203affected
  • 2.0.1.823affected

References