EUVD-2021-15756

Malware in sbrugna...

The vulnerability of the ArcGIS Service Directory component in multi-user GIS software for ArcGIS Enterprise allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ArcGIS Service Directory component in multi-user GIS solutions developed with ArcGIS Enterprise relates to the disclosure of information in error-prone data areas. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

CVE-2021-29115 An information disclosure vulnerability

An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose features...

CVE-2021-29115: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose features...

PT-2021-5164

Name of the Vulnerable Software and Affected Versions Esri ArcGIS Enterprise versions 10.9.0 and below Description An information disclosure issue in the ArcGIS Service Directory may allow a remote attacker to view hidden field names in feature layers, potentially revealing field names but not th...