Description
InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message.
References
- 16776 vdb-entry
- 1015669 vdb-entry
- 473 third-party-advisory
- http://www.irmplc.com/advisory017.htm
- vistaportal-server-path-disclosure(24894) vdb-entry
- ADV-2006-0695 vdb-entry
- 20060222 IRM 017: Multiple Vulnerabilities in Infovista Portal SE mailing-list
- 18994 third-party-advisory