title: Access-Token in ElasticJob UI causes password disclosure
description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.
problem types: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
affected:
{
product: Apache ShardingSphere ElasticJob-UI
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 3.0.0, status: affected, version: Apache ShardingSphere ElasticJob-UI 3.x, versionType: custom
}
metrics:
other: [
content: {'other': 'moderate'}
type: unknown
]