CVE-2012-0263
Last modified
CVE-2012-0263 is a vulnerability of currently unknown severity. monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.. EPSS estimates a 1.94% chance of exploitation in the next 30 days.
Description
monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Op5 | Monitor | <= 5.5.0 |
| Op5 | Monitor | 5.3.5 |
| Op5 | Monitor | 5.4.0 |
| Op5 | Monitor | 5.4.2 |
References
- http://secunia.com/advisories/47344Vendor Advisory
- http://secunia.com/advisories/47344Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-0263?
How severe is CVE-2012-0263?
How do I fix CVE-2012-0263?
Are you affected by CVE-2012-0263?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
