Advantech WebAccess CVE-2014-2366 Remote Information Disclosure Vulnerability
BID:68717
Info
Advantech WebAccess CVE-2014-2366 Remote Information Disclosure Vulnerability
| Bugtraq ID: | 68717 |
| Class: | Design Error |
| CVE: |
CVE-2014-2366 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 15 2014 12:00AM |
| Updated: | Jul 22 2014 12:07AM |
| Credit: | Dave Weinstein, Tom Gallagher, John Leitch, and others through ZDI |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Advantech WebAccess CVE-2014-2366 Remote Information Disclosure Vulnerability
Advantech WebAccess is prone to a remote information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information. This may aid in further attacks.
Advantech WebAccess 7.1 and prior are vulnerable.
Advantech WebAccess is prone to a remote information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information. This may aid in further attacks.
Advantech WebAccess 7.1 and prior are vulnerable.
Exploit / POC
Advantech WebAccess CVE-2014-2366 Remote Information Disclosure Vulnerability
Reports indicate that exploit is publicly available. Please see the references for more information.
Reports indicate that exploit is publicly available. Please see the references for more information.
Solution / Fix
Advantech WebAccess CVE-2014-2366 Remote Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Advantech WebAccess CVE-2014-2366 Remote Information Disclosure Vulnerability
References:
References: