Detawix Mobile Web Portal
Monthly
Sensitive information disclosure in DetaWix Mobile Web Portal versions before v1.0.19 allows unauthenticated remote attackers to retrieve data because the application fails to properly constrain access to certain functionality (CWE-201). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5) indicates a high-confidentiality-impact flaw requiring no authentication or user interaction, making any internet-facing instance a potential target. However, no public exploit code or active exploitation has been identified at time of analysis (no KEV, no POC, no EPSS), and the product's limited install base confines realistic risk to organizations actually running this portal.
Sensitive information disclosure in DetaWix Mobile Web Portal versions before v1.0.19 allows unauthenticated remote attackers to retrieve data because the application fails to properly constrain access to certain functionality (CWE-201). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5) indicates a high-confidentiality-impact flaw requiring no authentication or user interaction, making any internet-facing instance a potential target. However, no public exploit code or active exploitation has been identified at time of analysis (no KEV, no POC, no EPSS), and the product's limited install base confines realistic risk to organizations actually running this portal.