Advisories » OpenKM Remote Document Export Vulnerability

Release Date:	09/05/2008	Severity:	Less Critical
SecWatch Advisory:	SWID1021137	Cause:	Not specified
Solution Status:	Unpatched	Impact:	Disclosure of system information
Exploit Status:	None Available	Access Vector:	From remote
Affected Software:	OpenKM 1.x
Original Advisory:	http://sourceforge.net/project/shownotes.php?release_id=597940
Secunia:	SA30137

Description:

A vulnerability in OpenKM has been reported, which can be exploited by remote users to disclose potentially sensitive information.

An unspecified error exists in the export functionality, which can be exploited to export arbitrary documents.

Affected:

OpenKM versions prior to 2.0.

Solution:

The vulnerability has been fixed in version 2.0.

Credits:

Reported by vendor.

Free Vulnerability Notification Service

Receive free instant and customisable notifications of new vulnerabilities or exploits via e-mail, web or RSS feeds. Click here for more information.