Lucene search

PRIOn knowledge basePRION:CVE-2010-5188

HistoryAug 26, 2012 - 6:55 p.m.

Design/Logic Flaw

2012-08-2618:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.0%

JSON

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2) debug_profile parameter to main.php.

CPENameOperatorVersion
silverstripeeq2.3.4
silverstripeeq2.3.0 rc2
silverstripeeq2.3.1 rc2
silverstripeeq2.3.0 rc3
silverstripeeq2.3.3
silverstripeeq2.3.1
silverstripeeq2.3.1 rc1
silverstripeeq2.3.5
silverstripeeq2.3.0
silverstripeeq2.3.2

Name	Operator	Version
silverstripe	eq	2.3.4
silverstripe	eq	2.3.0 rc2
silverstripe	eq	2.3.1 rc2
silverstripe	eq	2.3.0 rc3
silverstripe	eq	2.3.3
silverstripe	eq	2.3.1
silverstripe	eq	2.3.1 rc1
silverstripe	eq	2.3.5
silverstripe	eq	2.3.0
silverstripe	eq	2.3.2

Rows per page:

1-10 of 111

References

doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.6

open.silverstripe.org/changeset/98229

open.silverstripe.org/changeset/98230

secunia.com/advisories/38697

www.openwall.com/lists/oss-security/2012/05/01/3

www.osvdb.org/62541

www.securityfocus.com/bid/38394

exchange.xforce.ibmcloud.com/vulnerabilities/56546

groups.google.com/group/silverstripe-announce/browse_thread/thread/c75fbd7926ed2725?tvc=2&fwc=1