Test Kennung:	1.3.6.1.4.1.25623.1.0.802703
Kategorie:	Web Servers
Titel:	Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability
Zusammenfassung:	NetDecision Dashboard Server is prone to an information disclosure vulnerability.
Beschreibung:	Summary: NetDecision Dashboard Server is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an improper validation of malicious HTTP request appended with '?' character, which discloses the Dashboard server's web script physical path. Vulnerability Impact: Successful exploitation will allow attackers to gain sensitive information. Affected Software/OS: NetDecision Dashboard Server version 4.5.1. Solution: Upgrade to NetDecision Dashboard Server 4.6.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1464 BugTraq ID: 52645 http://www.securityfocus.com/bid/52645 http://www.exploit-db.com/exploits/18543 http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_Dashboard_Server_Info_Disc_Vuln.txt http://secpod.org/blog/?p=478 http://osvdb.org/79653 http://secunia.com/advisories/48168 XForce ISS Database: netdecision-info-disclosure(73549) https://exchange.xforce.ibmcloud.com/vulnerabilities/73549
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.