CVE-2008-3717: Harmoni

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows remote attackers to obtain sensitive information.

Affected products

• Harmoni Harmoni: up to and including 1.4.7; version 0.0.2 only; version 0.0.3 only; version 0.0.4 only; version 0.0.5 only; version 0.1.0 only; …

Published 2008-08-19. Last modified 2026-06-16.