Beveiligingsadvies

CVE-2018-17891

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-10-04 21:00:00
Laatst bijgewerkt 2024-09-17 02:32:31
Toegewezen door icscert
CVSS-score geen score
Status PUBLISHED

Beschrijving

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a more elaborate attack.