Description
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local environment. Upgrading to version 5.2.0 addresses this issue. Upgrading the affected component is recommended.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Kameleo
5.0.1.0affected5.0.1.1affected5.0.1.2affected5.0.1.3affected5.0.1.4affected5.0.1.5affected5.0.1.6affected5.0.1.7affected5.0.1.8affected5.0.1.9affected5.0.1.10affected5.0.1.11affected5.0.1.12affected5.0.1.13affected5.0.1.14affected5.0.1.15affected5.0.1.16affected5.0.1.17affected5.0.1.18affected5.0.1.19affected5.0.1.20affected5.0.1.21affected5.0.1.22affected5.0.1.23affected5.0.1.24affected5.0.1.25affected5.0.1.26affected5.2.0unaffected