The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://docs.uptimesoftware.com/display/UT/Release+Notes | |
http://www.kb.cert.org/vuls/id/204232 | third party advisory us government resource |
http://jira.uptimesoftware.com/browse/UT-16039 |