Vulnerability Description
Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amberdms | Amberdms Billing System | <= 1.4.0 |
Related Weaknesses (CWE)
References
- https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798
- https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG
- https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798
- https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG
FAQ
What is CVE-2010-5292?
CVE-2010-5292 is a vulnerability with a CVSS score of 1.9 (LOW). Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the includ...
How severe is CVE-2010-5292?
CVE-2010-5292 has been rated LOW with a CVSS base score of 1.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-5292?
Check the references section above for vendor advisories and patch information. Affected products include: Amberdms Amberdms Billing System.