CVE-2012-5892: Medium severity havalite vulnerability
Published Nov 17, 2012
·Updated
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.
Affected Software
1 affected component
Havalite CMS<=1.1.0
Event History
Nov 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5892?
CVE-2012-5892 has a moderate severity level due to the leakage of sensitive information.
2
How do I fix CVE-2012-5892?
To fix CVE-2012-5892, you should restrict access to the sensitive files and upgrade to a later version of Havalite CMS.
3
What type of information is at risk in CVE-2012-5892?
CVE-2012-5892 exposes the configuration database, potentially allowing unauthorized access to sensitive data.
4
Can CVE-2012-5892 be exploited remotely?
Yes, CVE-2012-5892 can be exploited remotely by attackers through direct requests to the exposed database file.
5
Which versions of Havalite CMS are affected by CVE-2012-5892?
CVE-2012-5892 affects Havalite CMS versions 1.1.0 and earlier.