ProjectPier CVE-2013-3637 Remote Information Disclosure Weakness

Bugtraq ID:	61165
Class:	Design Error
CVE:	CVE-2013-3637
Remote:	Yes
Local:	No
Published:	May 21 2013 12:00AM
Updated:	May 21 2013 12:00AM
Credit:	Carl Benedict
Vulnerable:	ProjectPier ProjectPier 0.8.8
Not Vulnerable:

ProjectPier CVE-2013-3637 Remote Information Disclosure Weakness

ProjectPier is prone to a remote information-disclosure weakness.

Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks.

NOTE: This issue was previously discussed in BID 60739 (ProjectPier Remote Information Disclosure Weakness) but has been given its own record to better document it.

ProjectPier 0.8.8 is vulnerable; other versions may also be affected.

ProjectPier CVE-2013-3637 Remote Information Disclosure Weakness

Attackers can use a browser to exploit this issue.

ProjectPier CVE-2013-3637 Remote Information Disclosure Weakness

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ProjectPier CVE-2013-3637 Remote Information Disclosure Weakness

References:

• Project Pier Web Vulnerabilities (OSVDB)
  
• ProjectPier Homepage (ProjectPier)