Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a more elaborate attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2018-10-04T21:00:00Z

Updated: 2024-09-17T02:32:31.321Z

Reserved: 2018-10-02T00:00:00

Link: CVE-2018-17891

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-10-04T21:29:01.983

Modified: 2024-11-21T03:55:09.010

Link: CVE-2018-17891

cve-icon Redhat

No data.