HTTP: Mambo MySQL Database Info Disclosure

Mambo CMS is prone to a password disclosure vulnerability. Local attackers can exploit this issue to disclose sensitive information.

Extended Description

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.

Affected Products

Mambo-foundation mambo_cms

References

BugTraq: 58577

CVE: CVE-2013-2562

Short Name
HTTP:MAMBO-MYSQL-INF-DISCLOSURE
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2013-2562 Database Disclosure Info Mambo MySQL bid:58577
Release Date
09/29/2014
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown
Vendors

Mambo-foundation

CVSS Score

2.1

Found a potential security threat?