Required CVE Record Information
Description
An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- exploit-db.com: 45384 exploitx_transferred
- https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life x_transferred