GHSA-8jvg-8759-x9j6
GitHub Security Advisory
Exposure of Sensitive Information to an Unauthorized Actor in Apache Guacamole
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's active use of that same connection.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 28, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.