CyberRota Analysis
AI-GeneratedA critical memory leak vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows unauthorized actors to access sensitive information, including user passwords, by exploiting the "/.well-known/mta-sts" endpoint without requiring authentication. This issue affects all instances of TeamDavid through Rollout 524. Organizations using this software should prioritize immediate remediation to protect against potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-sts.”, the application responds with memory. By repeatedly requesting this endpoint, an attacker can access sensitive information, including user passwords. Exploitation does not require authentication. This issue affects TeamDavid through Rollout 524.