Design/Logic Flaw

2009-03-2518:30:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.7%

JSON

index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an invalid File parameter, which reveals the installation path in an error message.

CPENameOperatorVersion
openterracottaeq0.6.1

CPE	Name	Operator	Version
	openterracotta	eq	0.6.1

References

www.securityfocus.com/archive/1/490341/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/41571