CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def.
References
Link | Resource |
---|---|
https://community.rapid7.com/community/infosec/blog/2016/09/07/multiple-disclosures-for-multiple-network-management-systems-part-2 | Exploit Technical Description Third Party Advisory |
Configurations
Information
Published : 2017-04-09 20:59
Updated : 2017-04-14 06:23
NVD link : CVE-2016-5076
Mitre link : CVE-2016-5076
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
cloudviewnms
- cloudview_nms