The vulnerability in ixray-1.6-stcop permits an unauthorized actor to access sensitive information that should be protected, representing a data breach scenario typical of information disclosure flaws. This issue maps to the common weakness enumeration CWE‑200 and allows an adversary to read data beyond their privileges, potentially compromising confidentiality.

The affected product is ixray‑1.6‑stcop from the ixray‑team, with all releases prior to version 1.3 vulnerable. Specifically, any deployment of ixray‑1.6‑stcop before version 1.3 is impacted and should be considered at risk until an upgrade is applied.

The reported CVSS score of 5.3 indicates moderate severity; no EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires the attacker to have access to the ixray‑1.6‑stcop environment or an exposed endpoint, but no detailed attack vector is provided. Because the flaw discloses sensitive data, it can result in significant privacy or reputational damage if leveraged.