PT-2007-2343 · Moinmoin · Moinmoin

Published 2007-02-13 · Updated 2022-05-01 · CVE-2007-0902

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MoinMoin version 1.5.7

Description: The issue concerns an information leak in the debug reporting feature of MoinMoin, potentially exposing details about the software versions running on the host system. This could allow remote attackers to obtain sensitive information.

Recommendations: For MoinMoin version 1.5.7, add "show traceback=0" to the site configuration to disable debug tracebacks as a mitigation measure.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2007-0902

GHSA-MXH8-XGQ9-W782

Affected Products

Moinmoin

References · 9

• http://ubuntu.com/usn/usn-423-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0902 · Security Note
• https://osv.dev/vulnerability/CVE-2007-0902 · Vendor Advisory
• http://secunia.com/advisories/24138 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mxh8-xgq9-w782 · Vendor Advisory
• http://osvdb.org/33173 · Note
• http://securityfocus.com/bid/22515 · Note
• http://secunia.com/advisories/24244 · Note
• https://moinmo.in/MoinMoinRelease1.5/CHANGES · Note