CVE-2008-0636 Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version...
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| level platforms managed workplace service center | = 4 | No fix listed |
| level platforms managed workplace service center | = 5 | No fix listed |
| level platforms managed workplace service center | = 6 | No fix listed |
References
- 3659 third-party-advisory
- 20080208 SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability mailing-list
- 20080214 Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability mailing-list
- 20080908 Re: Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability mailing-list
- 27702 exploit vdb-entry