Design/Logic Flaw

2018-08-0318:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

JSON

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname.

CPENameOperatorVersion
3cx_web_servereq15.5.8801.3

CPE	Name	Operator	Version
	3cx_web_server	eq	15.5.8801.3

References

medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79