CVE-2019-8932

HIGH

rdbrck shift < 3.4.3 - Insufficiently Protected Credentials

Title source: llm

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.

Core 1

Core References

Release Notes, Vendor Advisory x_refsource_confirm

CVSS v3 7.5

EPSS 0.0123

EPSS Percentile 65.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-522

Status published

Products (1)

rdbrck/shift < 3.4.3

Published Jul 17, 2019

Tracked Since Feb 18, 2026