icon

We found results for “

WS-2019-0495

Good to know:

icon

Date: June 12, 2019

cockroachDB versions v2.1.0-alpha.20180702 to v19.2.0-alpha.20190606 are vulnerable to information disclosure. An attacker connected to a node may browse the web page and get the exact version number of cockroachDB

Language: Go

Severity Score

Severity Score

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Top Fix

icon

Upgrade Version

Upgrade to version v19.2.0-alpha.20190701

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): ADJACENT_NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us