CVE-2018-17891CWE-209

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5

published October 4, 2018

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a more elaborate attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.9th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2018-10-04T21:00Z
EPSS history
Timeline
  • 04 OCT 21:00Z
    Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5
    cvelistv5