Server: Information disclosure

Due to the inclusion of the Amazon SDK testing suite an unauthenticated attacker is able to gain additional informations about the server including:

• the PHP version
• the cURL version
• informations wether the following functions/modules are available:
  • SimpleXML
  • DOM
  • SPL
  • JSON
  • PCRE
  • File System Read/Write
  • OpenSSL
  • Zlib
  • APC
  • XCache
  • Memcache
  • Memcached
  • PDO
  • PDO-SQLite
  • SQLite 2
  • SQLite 3
• the following PHP settings:
  • open_basedir
  • safe_mode
  • zend.enable_gc
• the server architecture (32bit/64bit)

For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0