Skip to main content

Generation of Error Message Containing Sensitive Information

CVE-2015-10012

High
7.5/10

Summary

A vulnerability was found in sumocoders FrameworkUserBundle versions prior to 1.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file "Resources/views/Security/login.html.twig". The manipulation leads to information exposure through error message. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217268. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-209 - Generation of Error Message Containing Sensitive Information

The software generates an error message that includes sensitive information about its environment, users, or associated data.

References

Advisory Timeline

  • Published