Lucene search
Ubuntu.comUB:CVE-2015-8005HistoryNov 09, 2015 - 12:00 a.m.
CVE-2015-8005
2015-11-0900:00:00
ubuntu.com
ubuntu.com
7
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.4%
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3
uses the thumbnail ImageMagick command line argument, which allows remote
attackers to obtain the installation path by reading the metadata of a PNG
thumbnail file.
Notes
| Author | Note |
|---|---|
| sbeattie | mediawiki package have a known default install location on debian/ubuntu, so not likely exposing info that isn’t already known |
Related
cve
cve
CVE-2015-8005
2015-11-09 18:59:04
cvelist
cvelist
CVE-2015-8005
2015-11-09 18:00:00
nvd
nvd
CVE-2015-8005
2015-11-09 18:59:04
debiancve
debiancve
CVE-2015-8005
2015-11-09 18:59:04
prion
prion
Design/Logic Flaw
2015-11-09 18:59:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2015-11-02 23:21:29
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0421)
2015-11-08 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-25 00:00:00
MediaWiki Multiple Vulnerabilities (Nov 2015) - Linux
2015-11-25 00:00:00
nessus
nessus
MediaWiki < 1.23.11 / 1.24.4 / 1.25.3 Multiple Vulnerabilities
2016-08-05 00:00:00
Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)
2016-03-04 00:00:00
Fedora 21 : mediawiki-1.24.4-1.fc21 (2015-97fe05f788)
2016-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mediawiki-1.25.3-1.fc22
2015-11-05 23:27:59
[SECURITY] Fedora 21 Update: mediawiki-1.24.4-1.fc21
2015-11-05 21:50:58
[SECURITY] Fedora 23 Update: mediawiki-1.25.3-1.fc23
2015-11-05 22:26:54
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2015-10-16 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
70.4%
Related for UB:CVE-2015-8005