This vulnerability in AITpro BulletProof Security (up to version 6.9) allows an attacker to retrieve sensitive information embedded in data sent by the application. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges or user interaction, with a high impact on confidentiality but no impact on integrity or availability. The vulnerability is classified as 'Insertion of Sensitive Information Into Sent Data,' meaning sensitive data may be exposed unintentionally during normal data transmission. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The vulnerability allows unauthorized disclosure of sensitive information, potentially leading to data leakage. Confidentiality is fully impacted, while integrity and availability remain unaffected. This could expose sensitive data to remote attackers without requiring authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is available, users should monitor the vendor's communications for updates. Until a patch is released, consider limiting exposure of the affected BulletProof Security versions to untrusted networks if possible.