Lucene search
HistoryDec 31, 2013 - 8:55 p.m.
CVE-2012-0263
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.003
Percentile
68.1%
monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.
Affected configurations
Node
op5monitorRange≤5.5.0
ORop5monitorMatch5.3.5
ORop5monitorMatch5.4.0
ORop5monitorMatch5.4.2
Related
cve
cve
CVE-2012-0263
2013-12-31 20:55:15
cvelist
cvelist
CVE-2012-0263
2013-12-31 20:00:00
prion
prion
Design/Logic Flaw
2013-12-31 20:55:00
nessus
nessus
op5 Monitor Persistent Session Cookie
2012-01-17 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.003
Percentile
68.1%
Related for NVD:CVE-2012-0263