BID:8494

PHPGACL Debugging Information Disclosure Vulnerability

Info

PHPGACL Debugging Information Disclosure Vulnerability

Bugtraq ID:	8494
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2003 12:00AM
Updated:	Aug 25 2003 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	phpGACL phpGACL 3.1.1 b3 phpGACL phpGACL 3.1.1 b2 phpGACL phpGACL 3.1.1 phpGACL phpGACL 3.1 .0b4 phpGACL phpGACL 3.1 .0b3 phpGACL phpGACL 3.1 .0b2 phpGACL phpGACL 3.1 .0b phpGACL phpGACL 3.1 .0 phpGACL phpGACL 3.0.2

Not Vulnerable:	phpGACL phpGACL 3.2 .0b

Discussion

PHPGACL Debugging Information Disclosure Vulnerability

phpGACL may reveal debugging information to remote users. This could potentially expose database authentication credentials and other sensitive information.

Exploit / POC

PHPGACL Debugging Information Disclosure Vulnerability

This issue may be exploited with a web browser.

Solution / Fix

PHPGACL Debugging Information Disclosure Vulnerability

Solution:
This issue was addressed in phpGACL 3.2.0b. Users are advised to upgrade.

phpGACL phpGACL 3.0.2