CVE-2019-15032: Medium severity pydio cells vulnerability
Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15032?
CVE-2019-15032 is a vulnerability in Pydio 6.0.8 that allows an attacker to obtain sensitive information such as the name of the user who created a directory and other internal server information.
How does CVE-2019-15032 affect Pydio?
CVE-2019-15032 affects Pydio 6.0.8 by mishandling error reporting when a directory allows unauthenticated uploads and the remote-upload option is used with a specific URL.
What is the severity of CVE-2019-15032?
CVE-2019-15032 has a severity rating of medium with a severity value of 5.3.
How can I fix CVE-2019-15032 in Pydio 6.0.8?
To fix CVE-2019-15032, update Pydio to a version that has addressed the vulnerability or apply any available patches or workarounds provided by the Pydio team.
Where can I find more information about CVE-2019-15032?
You can find more information about CVE-2019-15032 on the official Pydio website, the referenced blog post, and the SourceForge project page for Pydio.