Join our subscribers
Installation Path Disclosure Weakness in CLANSPHERE
| Advisory ID: | HTB22692 |
| Product: | CLANSPHERE |
| Vendor: | csphere.eu |
| Vulnerable Versions: | 2010.0 Final and probably prior |
| Tested Version: | 2010.0 Final |
| Advisory Publication: | November 2, 2010 [without technical details] |
| Vendor Notification: | November 2, 2010 |
| Public Disclosure: | November 16, 2010 |
| Latest Update: | November 16, 2010 |
| Vulnerability Type: | Information Exposure Through Externally-generated Error Message [CWE-211] |
| Risk Level: | Medium |
 | |
| CVSSv2 Base Score: | 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) |
| Solution Status: | Fixed by Vendor |
| Discovered and Provided: | High-Tech Bridge Security Research Lab |
| Advisory Details: | |
High-Tech Bridge SA Security Research Lab has discovered a weakness in CLANSPHERE which could be exploited to gain access to potentially sensitive information. | |
| Solution: | |
| Upgrade to 2010.1 release. | |
References: | |
| [1] High-Tech Bridge Advisory HTB22692 - https://www.immuniweb.com/advisory/HTB22692 - Installation Path Disclosure Weakness in CLANSPHERE [2] CLANSPHERE - csphere.eu – CLANSPHERE is a content management software. [3] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types. | |
HTB22654: Installation Path Disclosure Weakness in MyBB
HTB22640: Installation Path Disclosure Weakness in Tribiq CMS | HTB22640
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.
