O2OA Cipher Connection CipherConnectionAction.java list information disclosure

{
                    "vendor": "n/a",
                    "product": "O2OA",
                    "versions": [
                        {
                            "version": "9.5.0",
                            "status": "affected"
                        },
                        {
                            "version": "9.5.1",
                            "status": "affected"
                        },
                        {
                            "version": "9.5.2",
                            "status": "affected"
                        },
                        {
                            "version": "9.5.3",
                            "status": "affected"
                        },
                        {
                            "version": "10.0.0",
                            "status": "affected"
                        },
                        {
                            "version": "10.0.1",
                            "status": "affected"
                        },
                        {
                            "version": "10.0.2",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:o2oa:o2oa:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Cipher Connection Handler"
                    ]
                }