Medium severity6.5NVD Advisory· Published Oct 27, 2017· Updated May 13, 2026
CVE-2017-15937
CVE-2017-15937
Description
Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX).
Affected products
1- cpe:2.3:a:artica:pandora_fms:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72dnvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.