PT-2020-16312
CVE-2020-26150
·
تاريخ النشر
2020-09-29
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Logaritmo Aware CallManager 2012
Description
The issue allows remote attackers to obtain sensitive information via a direct request to 'info.php', which calls the
phpinfo function.Recommendations
For Logaritmo Aware CallManager 2012, consider restricting access to the 'info.php' file to prevent unauthorized disclosure of sensitive information. As a temporary workaround, remove or disable the
phpinfo function call in 'info.php' until a more permanent solution is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾