In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.
{
"cpe": "cpe:2.3:a:jeedom:jeedom:*:*:*:*:*:*:*:*",
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "4.1.19"
}
]
}