Sonarsource » Sonarqube : Security Vulnerabilities, CVEs, CVSS score >= 7
SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position for SMTP and SVN is "it is the administrator's responsibility to configure it.
Max CVSS
7.5
EPSS Score
36.88%
Published
2020-10-28
Updated
2024-04-11
1 vulnerabilities found