NVD

Id
5430  
Name
CVE-2008-5688  
Description
MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught exception.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-12-19  
Modified Date
2009-02-18  
Seq
2008-5688  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33992 5430 CVE-2008-5688 [mediawiki-announce] 20081215 MediaWiki 1.13.3, 1.12.2, 1.6.11 security update  View
33993 5430 CVE-2008-5688 http://www.mediawiki.org/wiki/Manual:$wgShowExceptionDetails  View
33994 5430 CVE-2008-5688 FEDORA-2008-11688  View
33995 5430 CVE-2008-5688 FEDORA-2008-11802  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49882 JVNDB-2008-005192 MediaWiki における重要な情報を取得される脆弱性 MediaWiki は、wgShowExceptionDetails 変数が有効になっている際、デバッグメッセージ内のフルインストールパスを表示するため、重要な情報を取得される脆弱性が存在します。 CVE-2008-5688 35801 CVE-2008-5688 5430 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005192.html 2008-12-15 2012-09-25 View