JHENG GAO Student Learning Assessment and Support System Exposure of Sensitive Information Vulnerability

A vulnerability allowing unauthenticated remote attackers to access sensitive information has been identified in the Student Learning Assessment and Support System developed by JHENG GAO. This vulnerability enables attackers to view a specific page and obtain test accounts and passwords.

Impact

Exploitation of this vulnerability could lead to unauthorized access to test accounts and passwords, allowing attackers to potentially misuse these credentials.

Remediation

JHENG GAO has completed vulnerability remediation and is progressively updating versions. For on-premises deployments, contact JHENG GAO to confirm the update status or consider disabling external services and restricting access to the intranet.