4

CVE-2012-0263

Exploit

EPSS 0.75%
Veröffentlicht 31.12.2013 20:55:15
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Op5 ≫ Monitor Version <= 5.5.0

Op5 ≫ Monitor Version5.3.5

Op5 ≫ Monitor Version5.4.0

Op5 ≫ Monitor Version5.4.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.75%	0.72

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://seclists.org/fulldisclosure/2012/Jan/62

http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf

Exploit

http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/

https://bugs.op5.com/view.php?id=5094

http://secunia.com/advisories/47344

Vendor Advisory

http://www.osvdb.org/78067

https://nvd.nist.gov/vuln/detail/CVE-2012-0263

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0263

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0263

EUVD