Evergreen CVE-2015-2204 Information Disclosure Vulnerability

Bugtraq ID:	72889
Class:	Access Validation Error
CVE:	CVE-2015-2204
Remote:	Yes
Local:	No
Published:	Mar 04 2015 12:00AM
Updated:	Mar 04 2015 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Evergreen ILS Evergreen 2.7.1 Evergreen ILS Evergreen 2.6.4 Evergreen ILS Evergreen 2.5.8
Not Vulnerable:	Evergreen ILS Evergreen 2.7.4 Evergreen ILS Evergreen 2.6.7 Evergreen ILS Evergreen 2.5.9

Evergreen CVE-2015-2204 Information Disclosure Vulnerability

Evergreen is prone to an information-disclosure vulnerability.

Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.

Evergreen CVE-2015-2204 Information Disclosure Vulnerability

An attacker can exploit this issue using a readily available tools.

Evergreen CVE-2015-2204 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Evergreen CVE-2015-2204 Information Disclosure Vulnerability

References:

• Re: CVE request - Evergreen (Galen Charlton)
  
• SECURITY RELEASES: Evergreen 2.7.4, 2.6.7, and 2.5.9 (Evergreen ILS)
  
• Evergreen Homepage (Evergreen ILS)