CVE-2016-9839

Опубликовано: 08 дек. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.

Ссылки

http://www.securityfocus.com/bid/94856
Broken Link
Third Party Advisory
VDB Entry
https://github.com/mapserver/mapserver/pull/5356
Vendor Advisory
http://www.securityfocus.com/bid/94856
Broken Link
Third Party Advisory
VDB Entry
https://github.com/mapserver/mapserver/pull/5356
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*

Версия до 7.0.2 (включая)

EPSS

Процентиль: 73%

0.01501

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-9839

CVSS3: 7.5

ubuntu

почти 10 лет назад

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.

CVE-2016-9839

CVSS3: 7.5

debian

почти 10 лет назад

In MapServer before 7.0.3, OGR driver error messages are too verbose a ...

GHSA-92rp-xfpf-gq53

CVSS3: 7.5

github

больше 4 лет назад

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.

EPSS

Процентиль: 73%

0.01501

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200