PT-2016-3876 · Unknown · Web Viewer

Aristide Fattori + 2 · Published 2016-01-15 · Updated 2016-01-21 · CVE-2015-8280

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Web Viewer version 1.0.0.193

Description The issue allows remote attackers to discover credentials by reading detailed error messages.

Recommendations For Web Viewer version 1.0.0.193, consider restricting access to detailed error messages as a temporary workaround until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-8280

Affected Products

Web Viewer

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8280 · Security Note
• https://kb.cert.org/vuls/id/913000 · Note