In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash.
References
| Link | Resource |
|---|---|
| https://cxsecurity.com/issue/WLB-2018120091 | Exploit Third Party Advisory |
| https://packetstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.html | Third Party Advisory VDB Entry |
| https://seclists.org/fulldisclosure/2014/Aug/8 | Mailing List Third Party Advisory |
| https://www.exploit-db.com/exploits/46549/ | Exploit Third Party Advisory VDB Entry |
| https://cxsecurity.com/issue/WLB-2018120091 | Exploit Third Party Advisory |
| https://packetstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.html | Third Party Advisory VDB Entry |
| https://seclists.org/fulldisclosure/2014/Aug/8 | Mailing List Third Party Advisory |
| https://www.exploit-db.com/exploits/46549/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 02:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cxsecurity.com/issue/WLB-2018120091 - Exploit, Third Party Advisory | |
| References | () https://packetstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.html - Third Party Advisory, VDB Entry | |
| References | () https://seclists.org/fulldisclosure/2014/Aug/8 - Mailing List, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/46549/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2019-02-23 14:29
Updated : 2024-11-21 02:03
NVD link : CVE-2014-10079
Mitre link : CVE-2014-10079
CVE.ORG link : CVE-2014-10079
JSON object : View
Products Affected
vembu
- storegrid
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor