Description
Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/databases.yml, (2) core/log/qdPM_prod.log, or (3) core/apps/qdPM/config/settings.yml.
Unscored
CVE-2015-3881
EUVD-2015-3916GHSA-g2c8-c2j8-3vp6
Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/da…
Published Mar 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre