CVE-2017-8860

Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a "GET // HTTP/1.1" request.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cohuhd:3960hd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:cohuhd:3960hd:-:*:*:*:*:*:*:*

Information

Published : 2017-11-22 00:29

Updated : 2017-12-12 07:51


NVD link : CVE-2017-8860

Mitre link : CVE-2017-8860


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

cohuhd

  • 3960hd_firmware
  • 3960hd