PT-2012-6240 · Opensolution · Open Solution Quick.Cart

Haunt It · Publicado 2012-11-27 · Atualizado 2017-08-29 · CVE-2012-6049

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open Solution Quick.Cart version 5.0

Description The issue allows remote attackers to obtain sensitive information. This can be achieved by providing a long string or invalid characters in a cookie, which results in an error message that reveals the installation path.

Recommendations For Open Solution Quick.Cart version 5.0, consider validating and sanitizing cookie inputs to prevent the disclosure of sensitive information. As a temporary workaround, restrict access to error messages that may contain installation path details until a proper fix is applied.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-6049

Produtos afetados

Open Solution Quick.Cart

Referências · 4

• http://hauntit.blogspot.com/2012/03/en-quickcartv50-information-disclosure.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75204 · Nota
• http://packetstormsecurity.org/files/112242/Quick.Cart-5.0-Information-Disclosure.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6049 · Nota de Segurança