ProjectPier CVE-2013-3636 Remote Information Disclosure Weakness

Bugtraq ID:	60739
Class:	Design Error
CVE:	CVE-2013-3636
Remote:	Yes
Local:	No
Published:	May 21 2013 12:00AM
Updated:	Jul 16 2013 05:53PM
Credit:	Carl Benedict
Vulnerable:
Not Vulnerable:

ProjectPier CVE-2013-3636 Remote Information Disclosure Weakness

ProjectPier is prone to a remote information-disclosure weakness.

Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks.

ProjectPier 0.8.8 is vulnerable; other versions may also be affected.

NOTE: The issue (described by CVE-2013-3637) has been moved to BID 61165 (ProjectPier CVE-2013-3637 Remote Information Disclosure Weakness) to better document it.

ProjectPier CVE-2013-3636 Remote Information Disclosure Weakness

Attackers can use a browser to exploit this issue.

ProjectPier CVE-2013-3636 Remote Information Disclosure Weakness

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ProjectPier CVE-2013-3636 Remote Information Disclosure Weakness

References:

• ProjectPier Homepage (ProjectPier)