메뉴 건너뛰기

GREATUSER

cve

CVE-2017-16607

관리자 2018.01.25 04:00 조회 수 : 13

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation of a user-supplied string before using it to download heap memory dump. An attacker can leverage this in conjunction with other vulnerabilities to disclose sensitive information in the context of the current process. Was ZDI-CAN-4718.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16607
번호 제목 글쓴이 날짜 조회 수
467 CVE-2017-18049 관리자 2018.01.25 13
466 CVE-2017-17406 관리자 2018.01.25 13
» CVE-2017-16607 관리자 2018.01.25 13
464 CVE-2018-1042 관리자 2018.01.25 13
463 CVE-2017-16661 관리자 2017.11.09 13
462 CVE-2017-14099 관리자 2017.09.04 13
461 CVE-2018-6029 관리자 2018.01.25 12
460 CVE-2017-16659 관리자 2017.11.09 12
459 CVE-2017-16660 관리자 2017.11.09 12
458 CVE-2017-16616 관리자 2017.11.09 12
457 CVE-2017-16618 관리자 2017.11.09 12
456 CVE-2017-16650 관리자 2017.11.09 12
455 CVE-2017-9805 관리자 2017.09.16 12
454 CVE-2017-15094 관리자 2018.01.25 11
453 CVE-2018-1000014 관리자 2018.01.25 11
위로