CVE-2012-0263: Infoleak
Published Dec 31, 2013
·Updated
monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malformed hoststatustypes parameter to status/service/all or (2) a crafted request to config.
Affected Software
4 affected components
OP5 Monitor<=5.5.0
OP5 Monitor=5.3.5
OP5 Monitor=5.4.0
OP5 Monitor=5.4.2
Event History
Dec 31, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0263?
CVE-2012-0263 has a moderate severity rating due to the potential exposure of sensitive information.
2
How do I fix CVE-2012-0263?
To remediate CVE-2012-0263, upgrade to op5 Monitor version 5.5.1 or later.
3
Who is affected by CVE-2012-0263?
CVE-2012-0263 affects versions of op5 Monitor prior to 5.5.1.
4
What kind of information can be leaked due to CVE-2012-0263?
CVE-2012-0263 can lead to the exposure of sensitive data like database and user credentials.
5
What triggers the vulnerability in CVE-2012-0263?
The vulnerability in CVE-2012-0263 can be triggered by malformed parameters in requests to the status service.