CVE-2018-10245: Infoleak
Published Apr 20, 2018
·Updated
A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is allocated, obtaining the full path of the server, a similar issue to CVE-2006-3682. The attack can, for example, use the awstats.pl framename and update parameters.
Affected Software
1 affected component
Awstats AWStats<=7.6
Event History
Apr 20, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-10245?
CVE-2018-10245 is a Full Path Disclosure vulnerability in AWStats through 7.6.
2
How does CVE-2018-10245 work?
CVE-2018-10245 allows remote attackers to know the location of the config file, obtaining the full path of the server.
3
What is the severity of CVE-2018-10245?
CVE-2018-10245 has a severity rating of medium (5.3).
4
How can I fix CVE-2018-10245?
To fix CVE-2018-10245, update AWStats to version 7.6 or later.
5
Where can I find more information about CVE-2018-10245?
More information about CVE-2018-10245 can be found at the following reference: https://github.com/theyiyibest/AWStatsFullPathDisclosure