CVE-2020-25703

Description

The participants table download always included user emails, but should have only done so when users' emails are not hidden.

Statement

Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Understanding the Weakness (CWE)

Confidentiality

Technical Impact: Read Files or Directories; Read Memory; Read Application Data

Sensitive data may be exposed to attackers.

Acknowledgements

Red Hat would like to thank A. Schenkel for reporting this issue.

Frequently Asked Questions

Want to get errata notifications? Sign up here.