CVE-2017-15937

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...

PT-2017-14296

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows the leakage of a full installation pathname through GET data when the main page's graph requisition is intercepted. This also results in the disclosure of general OS information, as...

CVE-2017-15937: Exposure of Sensitive Information to an Unauthorized Actor

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...