CVE-2015-5959: Infoleak
Published Sep 6, 2017
·Updated
Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.
Affected Software
1 affected component
Froxlor Froxlor<=0.9.33.1
Remediation
Event History
Sep 6, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5959?
CVE-2015-5959 is considered a medium severity vulnerability due to the potential exposure of sensitive database credentials.
2
How do I fix CVE-2015-5959?
To fix CVE-2015-5959, update Froxlor to version 0.9.33.2 or later where the issue has been addressed.
3
Can CVE-2015-5959 lead to unauthorized access?
Yes, CVE-2015-5959 can lead to unauthorized access if attackers gain access to the database password through the log file.
4
What versions of Froxlor are affected by CVE-2015-5959?
Froxlor versions prior to 0.9.33.2 are affected by CVE-2015-5959.
5
What types of attacks can exploit CVE-2015-5959?
CVE-2015-5959 can be exploited by remote attackers through log file access to extract database credentials.