Information Disclosure Vulnerability in Anchor CMS by Anchor
CVE-2018-7251
9.8CRITICAL
What is CVE-2018-7251?
An issue exists in Anchor CMS 0.12.3 where the error logging system inadvertently exposes logs containing sensitive MySQL credentials through an accessible 'errors.log' URI. This can occur if certain MySQL errors, such as 'Too many connections', are encountered, leading to potential unauthorized access to sensitive information. It is crucial for users of Anchor CMS to update to version 0.12.7 or later to mitigate this security risk and protect their data.
References
EPSS Score
71% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved