CVE-2010-5292

Published: Jan 10, 2014Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job.

Affected (5)

Products: Amberdms: Amberdms Billing System

Amberdms

1 product

Amberdms Billing System

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Amberdms Amberdms Billing System	Up to 1.4.0
Amberdms Amberdms Billing System	Version 1.0.0
Amberdms Amberdms Billing System	Version 1.1.0
Amberdms Amberdms Billing System	Version 1.2.0
Amberdms Amberdms Billing System	Version 1.3.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES

Source: cve@mitre.org

https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG

Source: cve@mitre.org

https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES

Source: af854a3a-2127-422b-91ae-364da2661108

https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.