CVE-2006-2169 - RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message

Back Back to CVE browser

MEDIUM

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message

Published May 4, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.24%

Description

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://pridels0.blogspot.com/2006/04/rt-request-tracker-vuln.html
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2170
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26164
vdb-entryx_refsource_XF

Link	Providers	Tags
http://pridels0.blogspot.com/2006/04/rt-request-tracker-vuln.html		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2170		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26164		vdb-entryx_refsource_XF