CVE-2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.
References
Link Resource
http://www.securityfocus.com/bid/94856 Broken Link Third Party Advisory VDB Entry
https://github.com/mapserver/mapserver/pull/5356 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*

History

07 Jun 2021, 15:55

Type Values Removed Values Added
CPE cpe:2.3:a:umn:mapserver:*:*:*:*:*:*:*:* cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*

Information

Published : 2016-12-08 08:59

Updated : 2024-02-04 19:11


NVD link : CVE-2016-9839

Mitre link : CVE-2016-9839

CVE.ORG link : CVE-2016-9839


JSON object : View

Products Affected

osgeo

  • mapserver
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor