Lucene search

[email protected]CVE-2010-5188

HistoryAug 26, 2012 - 6:55 p.m.

CVE-2010-5188

2012-08-2618:55:01

CWE-200

[email protected]

web.nvd.nist.gov

silverstripe

cve-2010-5188

remote attackers

sensitive information

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2) debug_profile parameter to main.php.

Affected configurations

NVD

Node

silverstripesilverstripeMatch2.3.0

silverstripesilverstripeMatch2.3.0rc1

silverstripesilverstripeMatch2.3.0rc2

silverstripesilverstripeMatch2.3.0rc3

silverstripesilverstripeMatch2.3.1

silverstripesilverstripeMatch2.3.1rc1

silverstripesilverstripeMatch2.3.1rc2

silverstripesilverstripeMatch2.3.2

silverstripesilverstripeMatch2.3.3

silverstripesilverstripeMatch2.3.4

silverstripesilverstripeMatch2.3.5

CPENameOperatorVersion
silverstripe:silverstripesilverstripeeq2.3.0
silverstripe:silverstripesilverstripeeq2.3.1
silverstripe:silverstripesilverstripeeq2.3.2
silverstripe:silverstripesilverstripeeq2.3.3
silverstripe:silverstripesilverstripeeq2.3.4
silverstripe:silverstripesilverstripeeq2.3.5

CPE	Name	Operator	Version
silverstripe:silverstripe	silverstripe	eq	2.3.0
silverstripe:silverstripe	silverstripe	eq	2.3.1
silverstripe:silverstripe	silverstripe	eq	2.3.2
silverstripe:silverstripe	silverstripe	eq	2.3.3
silverstripe:silverstripe	silverstripe	eq	2.3.4
silverstripe:silverstripe	silverstripe	eq	2.3.5

References

doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.6

groups.google.com/group/silverstripe-announce/browse_thread/thread/c75fbd7926ed2725?tvc=2&fwc=1

open.silverstripe.org/changeset/98229

open.silverstripe.org/changeset/98230

secunia.com/advisories/38697

www.openwall.com/lists/oss-security/2012/05/01/3

www.osvdb.org/62541

www.securityfocus.com/bid/38394

exchange.xforce.ibmcloud.com/vulnerabilities/56546

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

Related for CVE-2010-5188

cvelist1 prion1 nessus1 nvd1