Vulnerability Details CVE-2012-0263
monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.5%
CVSS Severity
CVSS v2 Score 4.0
References
- http://seclists.org/fulldisclosure/2012/Jan/62
- http://secunia.com/advisories/47344
- http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
- http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/
- http://www.osvdb.org/78067
- https://bugs.op5.com/view.php?id=5094
- http://seclists.org/fulldisclosure/2012/Jan/62
- http://secunia.com/advisories/47344
- http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf
- http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/
- http://www.osvdb.org/78067
- https://bugs.op5.com/view.php?id=5094
Products affected by CVE-2012-0263
-
cpe:2.3:a:op5:monitor:-
-
cpe:2.3:a:op5:monitor:5.3.5
-
cpe:2.3:a:op5:monitor:5.4.0
-
cpe:2.3:a:op5:monitor:5.4.2
-
cpe:2.3:a:op5:monitor:5.5.0