SMA Sunny Portal Personal Data Disclosure Vulnerability
Vulnerability
A data disclosure vulnerability has been identified in SMA Sunny Portal versions prior to 15.08.2025. This vulnerability allows a low-privileged, authenticated user to obtain the username of another registered user by entering the user's email address.
Impact
Exploitation of this vulnerability allows for the unauthorized disclosure of personal data, specifically the names and surnames of registered users.
Remediation
The vulnerability has been addressed in Sunny Portal versions 15.08.2025 and later.
Added: Aug 19, 2025, 9:17 AM
Updated: Aug 19, 2025, 9:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
0.4threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.