Intrusion PreventionXymon.Daemon.Config.File.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Xymon.
The vulnerability is due to an error in the vulnerable application when handling a maliciously request. An attacker can exploit this to disclose arbitrary files on the affected machine via a crafted request.
Affected Products
Xymon version before 4.3.25
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://sourceforge.net/p/xymon/code/7890/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48294 |
| Created | Aug 23, 2019 |
| Updated | Oct 23, 2019 |
| Risk |
|
| CVE ID | CVE-2016-2055 |
| Exploit Prediction Score | 89.9% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD |
| Affected App | Other |