vantage6-UI docker image leaks software version information
CVE-2024-22200

3.3LOW

Key Information:

Vendor

Vantage6

Status
Vantage6-ui
Vendor
CVE Published:
30 January 2024

What is CVE-2024-22200?

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0.

Affected Version(s)

vantage6-UI < 4.2.0

References

https://github.com/vantage6/vantage6-UI/security/advisori...
x_refsource_CONFIRM
https://github.com/vantage6/vantage6-UI/commit/92e0fb5102...
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.