Vulnerabilities CVE-2020-36876

CVE-2020-36876

High

Open

TLP:CLEAR

ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running on the device. Attackers can access sensitive information by visiting the message_log page.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.37%

29.5th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Dec 5, 2025
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.