Information disclosure in Amberdms Billing System

CVE-2010-5292

Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job.

Vulnerability class: Information Disclosure

EPSS: 0.003 (21.7th percentile) — read the EPSS interpretation.

Affected products

Amberdms Amberdms_billing_system — versions 1.0.0, 1.1.0, 1.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)