| Package | Affected versions | Patched versions |
|---|---|---|
| insightvm | < 6.6.244 | 6.6.244 |
Rapid7's InsightVM maintenance mode login page suffers from a sensitive information exposure vulnerability whereby, sensitive information is exposed through query strings in the URL when login is attempted before the page is fully loaded. This vulnerability allows attackers to acquire sensitive information such as passwords, auth tokens, usernames etc. The vulnerability is remediated in version 6.6.244.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free