xMatters Notification Throughput Details Report Information Disclosure Vulnerability

Bugtraq ID:	43209
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 14 2010 12:00AM
Updated:	Sep 14 2010 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:
Not Vulnerable:

xMatters Notification Throughput Details Report Information Disclosure Vulnerability

xMatters is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

xMatters versions prior to version 4.1.0 patch 3 are vulnerable.

xMatters Notification Throughput Details Report Information Disclosure Vulnerability

Attackers can exploit this issue using a browser.

xMatters Notification Throughput Details Report Information Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

xMatters Notification Throughput Details Report Information Disclosure Vulnerability

References:

• Product Homepage (xMatters)
  
• xMatters (PRE-151) (xMatters)