Description
index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request.
References
- 1018512 vdb-entry
- 20070730 Security Testing Enterprise Messaging Systems mailing-list
- 46993 vdb-entry
- http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf
- ADV-2007-2814 vdb-entry