CVE-2019-8932

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-07-17

Last modified

2024-08-04

Weaknesses

CWE-522

Affected products

• Shift (Rdbrck)

References

• https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/