PT-2014-8901
CVE-2014-9247
·
تاريخ النشر
2014-12-15
·
تاريخ التحديث
2016-03-21
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Zenoss Core versions through 5 Beta 3
Description
The issue allows remote authenticated users to obtain sensitive information, including user account, e-mail address, and role information, by visiting the ZenUsers (also known as User Manager) page.
Recommendations
For versions through 5 Beta 3, consider restricting access to the ZenUsers page until a fix is available. As a temporary workaround, limit the privileges of authenticated users to minimize the risk of sensitive information exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾