CVE-2012-0263

Description

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.

References

https://bugs.op5.com/view.php?id=5094

http://www.osvdb.org/78067

http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/

http://secunia.com/advisories/47344

http://seclists.org/fulldisclosure/2012/Jan/62

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS