The vulnerability is an information disclosure flaw (CWE-200) that allows an unauthorized actor to obtain sensitive data while using ixray-1.6-stcop. The flaw exposes confidential information, potentially compromising data confidentiality but does not appear to affect integrity or availability.

ixray-team ixray-1.6-stcop versions prior to 1.3 are affected. No other vendor or product variants are listed.

The CVSS score is 3.7, indicating a moderate impact. The EPSS score is below 1%, implying a very low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly stated in the advisory; it is inferred that an attacker must have some access to the system (either local or remote) to exploit the disclosure. No public exploit code is known.