Information Disclosure Vulnerability in Schneider Electric U.motion Builder Software

Information Disclosure Vulnerability in Schneider Electric U.motion Builder Software

CVE-2018-7776 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data.

Learn more about our Web Application Penetration Testing UK.