Description
Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could aid further compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tibbo Systems | AggreGate Network Manager | < 6.40.05 | 6.40.05 |