Sitecore CMS Security Databases Information Disclosure Vulnerability

Bugtraq ID:	34162
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 20 2009 12:00AM
Updated:	Mar 18 2009 06:46PM
Credit:	National Australia Bank Security Assurance Team
Vulnerable:	Sitecore Sitecore CMS 5.3.2 rev. 081002
Not Vulnerable:	Sitecore Sitecore CMS 5.3.2 rev. 090212

Sitecore CMS Security Databases Information Disclosure Vulnerability

Sitecore CMS is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to harvest sensitive information that may lead to further attacks.

Versions prior to Sitecore CMS 5.3.2 rev. 090212 are vulnerable.

Sitecore CMS Security Databases Information Disclosure Vulnerability

Attackers can exploit this issue via a web browser.

Sitecore CMS Security Databases Information Disclosure Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

Sitecore CMS Security Databases Information Disclosure Vulnerability

References:

• Release History (Sitecore CMS V5.3.2) (Sitecore)
  
• Sitecore CMS Homepage (Sitecore)
  
• Sitecore .NET 5.3.x - web service information disclosure ([email protected])