CVE-2015-2203

MEDIO 6.5CVE-2015-2203 · Published 01/02/2018 · updated 17/06/2026

In breve

CVE-2015-2203 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda evergreen (evergreen-ils).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
evergreen evergreen-ils	`= 2.5.9= 2.6.7= 2.7.4`	No fix yet

Description

Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL.

References

evergreen-ils.org/downloads/ChangeLog-2.5.8-2.5.9 · Issue Tracking
evergreen-ils.org/downloads/ChangeLog-2.6.6-2.6.7 · Issue Tracking
evergreen-ils.org/downloads/ChangeLog-2.7.3-2.7.4 · Issue Tracking
evergreen-ils.org/security-releases-evergreen-2-7-4-2-6-7-and-2-5-9 · Release Notes
git.evergreen-ils.org
openwall.com/lists/oss-security/2015/03/04/3 · Mailing List
securityfocus.com/bid/72885 · Third Party Advisory
bugs.launchpad.net/evergreen/+bug/1206589 · Issue Tracking

Altre vulnerabilità di evergreen

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

evergreen

evergreen-ils

= 2.5.9= 2.6.7= 2.7.4

No fix yet

Altre vulnerabilità di evergreen

Vedi tutto →