CVE-2015-1306: Infoleak
Published Jan 22, 2015
·Updated
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.
Affected Software
34 affected components
sympa sympa=6.0.0
sympa sympa=6.0.1
sympa sympa=6.0.2
sympa sympa=6.0.3
sympa sympa=6.0.4
sympa sympa=6.0.5
sympa sympa=6.0.6
sympa sympa=6.0.7
sympa sympa=6.0.8
sympa sympa=6.0.9
sympa sympa=6.1.0
sympa sympa=6.1.1
sympa sympa=6.1.2
sympa sympa=6.1.3
sympa sympa=6.1.4
sympa sympa=6.1.5
sympa sympa=6.1.6
sympa sympa=6.1.7
sympa sympa=6.1.8
sympa sympa=6.1.9
sympa sympa=6.1.10
sympa sympa=6.1.11
sympa sympa=6.1.12
sympa sympa=6.1.13
sympa sympa=6.1.14
sympa sympa=6.1.15
sympa sympa=6.1.16
sympa sympa=6.1.17
sympa sympa=6.1.18
sympa sympa=6.1.19
sympa sympa=6.1.20
sympa sympa=6.1.21
sympa sympa=6.1.22
sympa sympa=6.1.23
Remediation
Patch Available
Event History
Jan 22, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1306?
CVE-2015-1306 is considered a moderate severity vulnerability that allows remote file reading.
2
How do I fix CVE-2015-1306?
To fix CVE-2015-1306, upgrade to Sympa version 6.0.10 or 6.1.24 or later.
3
What versions are affected by CVE-2015-1306?
CVE-2015-1306 affects Sympa versions 6.0.x before 6.0.10 and 6.1.x before 6.1.24.
4
What type of vulnerability is CVE-2015-1306?
CVE-2015-1306 is a file read vulnerability in the newsletter posting area of the Sympa web interface.
5
Can CVE-2015-1306 be exploited remotely?
Yes, CVE-2015-1306 can be exploited by remote attackers to read arbitrary files.