CVE-2010-5292

Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:amberdms:amberdms_billing_system:*:*:*:*:*:*:*:*
cpe:2.3:a:amberdms:amberdms_billing_system:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:amberdms:amberdms_billing_system:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:amberdms:amberdms_billing_system:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:amberdms:amberdms_billing_system:1.3.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-01-10 16:47

Updated : 2024-02-28 12:00


NVD link : CVE-2010-5292

Mitre link : CVE-2010-5292

CVE.ORG link : CVE-2010-5292


JSON object : View

Products Affected

amberdms

  • amberdms_billing_system
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor