description: an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06
problem types: Information Disclosure
affected:
{
product: Apache OFBiz
vendor: Apache
versions:
status: affected, version: Apache OFBiz 16.11.01 to 16.11.06
}