Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Rdbrck records in CISA KEVNo Rdbrck vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01219 · Published 2019-07-17 · No fix listed CWE-922
Priority LOW 35
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01219 · Published 2019-07-17 · No fix listed CWE-922
Priority LOW 35
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0123 · Published 2019-07-17 · No fix listed CWE-522
Priority LOW 35
Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01111 · Published 2019-07-17 · No fix listed
Priority LOW 25
Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00377 · Published 2019-07-17 · No fix listed
Priority LOW 25
Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00377 · Published 2019-07-17 · No fix listed CWE-426
THREATIST.IORead the docs