CVE-2012-0263 | BDVDB-2026-59129 Detail

Description#

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/78067
https://bugs.op5.com/view.php?id=5094
http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/
http://secunia.com/advisories/47344
http://seclists.org/fulldisclosure/2012/Jan/62
http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf

Exploit#

No public exploit known

History#

Version 12013-12-31Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.