CVE-2014-9245 - Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382

Back Back to CVE browser

MEDIUM

Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382

Published Dec 15, 2014

5.0

MEDIUM

CVSS 2.0

EPSS 1.41%

Description

Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

http://www.kb.cert.org/vuls/id/449452
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.kb.cert.org/vuls/id/449452		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing		x_refsource_CONFIRMVendor Advisory