CVE-2016-2055: Infoleak
xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Xymonto a version that resolves this vulnerability.Fixed in 4.3.25
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2055?
CVE-2016-2055 is classified as a medium severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2016-2055?
To mitigate CVE-2016-2055, upgrade to Xymon version 4.3.25 or later, which contains the necessary security patches.
What impact does CVE-2016-2055 have on Xymon users?
CVE-2016-2055 allows remote attackers to read arbitrary files from the configuration directory, posing a significant risk to sensitive information.
Which versions of Xymon are affected by CVE-2016-2055?
Xymon versions 4.1.x, 4.2.x, and 4.3.x prior to 4.3.25 are vulnerable to CVE-2016-2055.
Can CVE-2016-2055 be exploited remotely?
Yes, CVE-2016-2055 can be exploited remotely through the vulnerable 'config' command in Xymon.