CoreCVE
Back

MEDIUM

Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382

Published Dec 15, 2014

Description

Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by attempting a product-rename action with an invalid new name and then reading a stack trace, as demonstrated by internal URL information, aka ZEN-15382.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner certcc
Published Dec 15, 2014
Updated Aug 6, 2024
Reserved Dec 3, 2014
Link CVE-2014-9245

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2014-9245

Red Hat

No data

ENISA EUVD

Assigner certcc
Published Dec 15, 2014
Updated Aug 6, 2024
Link EUVD-2014-9070

GitHub

No data