VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 27, 2017· Updated Jun 17, 2026

CVE-2017-15937

CVE-2017-15937

Description

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX).

Affected products

2
  • Artica/Pandorafms2 versions
    cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.