PT-2016-7722 · Exponent · Exponent Cms

Pang0Lin · Published 2016-11-11 · Updated 2017-07-28 · CVE-2016-9284

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0

Description The issue allows remote attackers to read user information. This is achieved through the getUsersByJSON endpoint, specifically by appending a string to the "users/getUsersByJSON/sort/" endpoint.

Recommendations For Exponent CMS version 2.4.0, consider restricting access to the getUsersByJSON endpoint in the usersController.php file as a temporary workaround until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-9284

Affected Products

Exponent Cms

References · 6

• https://github.com/exponentcms/exponent-cms/commit/e7b6856ac384bf2b8ea7761a1e46d6e4186d36f4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-9284 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9284 · Vendor Advisory
• http://securitytracker.com/id/1037281 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9284 · Note
• http://securityfocus.com/bid/94296 · Note