7.5Hoch

CVE-2026-103098GV-Eye Sensitive information exposure in URL query parameter Vulnerability

GeoVision Inc. GV-Eye Veröffentlicht: (vor 1 Monat)

Beschreibung

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key

Schwachstellentyp (CWE): CWE-319

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
GeoVision Inc. GV-Eye V3.6.0, fixed V3.7.2

Referenzen und Patches