CVE-2016-9418: Infoleak
Published Jan 31, 2017
·Updated
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.
Affected Software
6 affected components
MyBB Merge System<=1.8.7
MyBB MyBB<=1.8.7
Microsoft Windows
All of the following
Any of the following
MyBB Merge System<=1.8.7
MyBB MyBB<=1.8.7
Microsoft Windows
Remediation
Patch Available
Patch Available
Event History
Jan 31, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9418?
CVE-2016-9418 has been rated as a medium severity vulnerability.
2
How do I fix CVE-2016-9418?
To fix CVE-2016-9418, upgrade MyBB and MyBB Merge System to version 1.8.8 or later.
3
What systems are affected by CVE-2016-9418?
CVE-2016-9418 affects MyBB versions before 1.8.8 and MyBB Merge System versions before 1.8.8 on Windows.
4
What type of information can be exposed by CVE-2016-9418?
CVE-2016-9418 may allow remote attackers to access sensitive information from ACP backups.
5
Can CVE-2016-9418 affect non-Windows systems?
CVE-2016-9418 is specific to Windows installations of MyBB and MyBB Merge System.