CVE-2014-9247

Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3

Description The issue allows remote authenticated users to obtain sensitive information, including user account, e-mail address, and role information, by visiting the ZenUsers (also known as User Manager) page.

Recommendations For versions through 5 Beta 3, consider restricting access to the ZenUsers page until a fix is available. As a temporary workaround, limit the privileges of authenticated users to minimize the risk of sensitive information exposure.