Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Collaboration | Hummingbird | * | 5.21 (including) |
| Collaboration | Hummingbird | 5.2 (including) | 5.2 (including) |
| Enterprise_collaboration | Hummingbird | * | 5.21 (including) |
| Enterprise_collaboration | Hummingbird | 5.2 (including) | 5.2 (including) |