Padloc
Monthly
Unauthenticated SCIM directory read in Padloc through 4.3.0 lets remote attackers retrieve provisioned user and group records - usernames, emails, names, externalIds and group memberships - from the SCIM endpoints of any organization that has directory provisioning configured, simply by supplying any non-empty bearer token. The attacker must know the target organization id, which is embedded in the SCIM request URL path, and the flaw is read-only: it exposes directory metadata but does not permit modification of directory data and is inert where SCIM provisioning is not enabled. Severity is moderate (CVSS 4.0 base 6.3; assessed CVSS 3.1 6.3, confidentiality-only) with priority 'this_month'; no public exploit code or active exploitation has been identified at time of analysis.
Unauthenticated SCIM directory read in Padloc through 4.3.0 lets remote attackers retrieve provisioned user and group records - usernames, emails, names, externalIds and group memberships - from the SCIM endpoints of any organization that has directory provisioning configured, simply by supplying any non-empty bearer token. The attacker must know the target organization id, which is embedded in the SCIM request URL path, and the flaw is read-only: it exposes directory metadata but does not permit modification of directory data and is inert where SCIM provisioning is not enabled. Severity is moderate (CVSS 4.0 base 6.3; assessed CVSS 3.1 6.3, confidentiality-only) with priority 'this_month'; no public exploit code or active exploitation has been identified at time of analysis.