Sensitive Information Disclosure in Source URL of ipk Package

CVE-2017-9731 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package.

Learn more about our Web Application Penetration Testing UK.