Telaen CVE-2013-2624 Information Disclosure Vulnerability

Bugtraq ID:	60340
Class:	Unknown
CVE:	CVE-2013-2624
Remote:	Yes
Local:	No
Published:	Jun 03 2013 12:00AM
Updated:	Jun 03 2013 12:00AM
Credit:	Manuel Garcia Cardenas - Internet Security Auditors
Vulnerable:	Telaen Telaen 1.3.0
Not Vulnerable:	Telaen Telaen 1.3.1

Telaen CVE-2013-2624 Information Disclosure Vulnerability

Telaen is prone to an information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.

Versions prior to Telaen 1.3.1 are vulnerable.

Telaen CVE-2013-2624 Information Disclosure Vulnerability

The following example URI is available:

hhtp://www.example.com//telaen/inc/init.php

Telaen CVE-2013-2624 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Telaen CVE-2013-2624 Information Disclosure Vulnerability

References:

• [ISecAuditors Security Advisories] Multiple Vulnerabilities in Telaen <= 1.3.0 (Manuel Garcia Cardenas)
  
• 2013-009: Multiple Vulnerabilities in Telaen <= 1.3.0 (Manuel Garcia Cardenas)
  
• Telaen 1.3.1 Released! (Telaen)
  
• Telaen Homepage (Telaen)