CVE-2012-5892 in Havalite

Riassunto

di MITRE

Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 17/11/2012
• Divulgazione: 17/11/2012
• Moderazione: accettato
• Voce: VDB-62938
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01480
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-5892
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-5892
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-5892/