CVE-2017-15937

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition

published October 27, 2017

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01016 · 62.7th percentile
Published
2017-10-27T20:00Z
EPSS history
Timeline
  • 27 OCT 20:00Z
    Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition
    cvelistv5