« Volver al listado

CVE-2010-5187

Estado: ModificadaMedia (4.3)—

SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the (1) sapphire, (2) cms, or (3) mysite folders, which reveals the installation path in an error message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Silverstripe — Silverstripe

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-5187",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-08-26T18:55:01.590",
  "references": [
    {
      "url": "http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.8",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/30/1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/30/3",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/05/01/3",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.8",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/30/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/30/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/05/01/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the (1) sapphire, (2) cms, or (3) mysite folders, which reveals the installation path in an error message."
    },
    {
      "lang": "es",
      "value": "SilverStripe v2.3.x anterior a v2.3.8 y v2.4.x anterior a v2.4.1, cuando está en ejecución el servidores con ciertas configuraciones, permite a atacantes remotos obtener información sensible a través de una petición directa a ficheros PHP en el (1) sapphire, (2) cms, o (3) carpetas mysite, lo que revela la ruta de instalación en un mensaje de error."
    }
  ],
  "lastModified": "2026-06-16T23:26:17.047",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24734325-97DA-4B2C-B192-3F4B83CCF0C0"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D875C510-39F2-4726-9DBD-3D95A5CB3D5D"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE8C544D-E233-488D-B768-8C077BB79338"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26E1807F-7DEB-4519-95B9-4FA647C7D477"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "609BEA7D-81F2-4DFE-AB2A-157A6B7DE348"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.1:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAB67F4E-0E56-4597-BD9B-90D07685D7F7"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.1:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA541F02-F78A-4E43-8212-690810311187"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7856E216-D7B7-48A5-9D20-9F1973DA005D"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF4FF5F5-6565-4EA1-8099-2C4C964DA006"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E0AD691-1BA2-4D8B-935C-B2C7A31BD5ED"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AD30632-B31E-4425-827E-205351ABECE6"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "706247B5-ACA3-4863-BDBC-B42EA95E1476"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87690027-1CF7-477E-91FE-87E6F77B2988"
            },
            {
              "criteria": "cpe:2.3:a:silverstripe:silverstripe:2.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5BCB4DE-0432-4378-8A31-81208794EBD7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}