Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5688
HistoryDec 19, 2008 - 12:00 a.m.

CVE-2008-5688

2008-12-1900:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

76.4%

MediaWiki 1.8.1, and other versions before 1.13.3, when the
wgShowExceptionDetails variable is enabled, sometimes provides the full
installation path in a debugging message, which might allow remote
attackers to obtain sensitive information via unspecified requests that
trigger an uncaught exception.

Notes

Author Note
mdeslaur installation path is known in ubuntu packages

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

76.4%